News for hackers. Stuff that matters.
Re:Judge: Citibank isn't entitled to $500M it sent to variou... by rational_indian on Thursday February 18, 2021 @11:29AM (#26181855)
> At scale, human errors are a certainty, while documentation and training is far from useless, no amount of it can change that fact. It's therefore a critical responsibility of systems designers to design their systems to be resilient to mistakes.

If only the people who insist on using unsafe languages understood this. Their position is that you should get better at not making mistakes.

Re:Judge: Citibank isn't entitled to $500M it sent to variou... by missblit on Thursday February 18, 2021 @11:51AM (#26182194)
I work with C++ on a daily basis and the position is actually closer to "sandbox anything tricky, and run everything through fuzzers and sanitizers."

Anyone who thinks they can overcome 100% of memory-unsafety bugs through looking at the code real hard is fooling themselves. But I'm not convinced there's a lot of people who actually think that (maybe there's some people who just don't care or never considered it)

Re:Judge: Citibank isn't entitled to $500M it sent to variou... by rational_indian on Thursday February 18, 2021 @12:41PM (#26182928)
This has not been my experience. Most people don't bother with these things. Memory safety / undefined behavior is a non issue for them.