News for hackers. Stuff that matters.

A comment on Chromium project finds that 70% of security defects are memory safety problems. Parent comment

Re:Chromium project finds that 70% of security defects are m... by saagarjha on Sunday May 24, 2020 @03:50AM (#23289907)
Chrome is a heavy user of such tools and has many talented engineers working on it.
[ Parent | on HN ]
Re:Chromium project finds that 70% of security defects are m... by aylp on Sunday May 24, 2020 @09:54AM (#23291525)
Citation needed. I never see the same level of dedication in big Google or Facebook projects as in well run smaller projects like SQLite.

You are directly rewarded for "new" features (i.e. plagiarizing or rewriting old ones and selling them as new).

So I don't think the engineers are particularly talented, and the incentives are not the same as for SQLite.

[ Parent | on HN ]
Re:Chromium project finds that 70% of security defects are m... by ReactiveJelly on Sunday May 24, 2020 @10:59AM (#23291945)
If using Rust results in fewer bugs for less money, shouldn't we still do it?

The reason SQLite can test so thoroughly is that their requirements never change. I have tried to browse the web with SQLite but so far no luck.

[ Parent | on HN ]