News for hackers. Stuff that matters.

A comment on A case against security nihilism. Parent comment

Re:A case against security nihilism by IggleSniggle on Tuesday July 20, 2021 @09:04PM (#27901131)
It may sound like I’m being snarky, but I’m not:

Aren’t users / social engineering make up the actual majority of real-world vulnerabilities, and pose the most prevalent extant threat in the entire software ecosystem?

[ Parent | on HN ]
Re:A case against security nihilism by staticassertion on Tuesday July 20, 2021 @10:12PM (#27901588)
Yes, but I think that within the context of discussing a memory safety vulnerability in a text messaging app it's reasonable to talk about memory safe parsers, no?

Beyond that, I've already addressed phishing at our company, it just didn't seem worth pointing out.

[ Parent | on HN ]
Re:A case against security nihilism by lisper on Tuesday July 20, 2021 @09:32PM (#27901304)
A fair point, but that's not really a problem with the technology. (And I did hedge with "probably" :-)
[ Parent | on HN ]