News for hackers. Stuff that matters.

A comment on "Secret" Agent Exposes Azure Customers to Unauthorized Code Execution. Parent comment

Re:"Secret" Agent Exposes Azure Customers to Unauthorized Co... by capableweb on Wednesday September 15, 2021 @04:51AM (#28536773)
Not sure why what you're saying would be more true for C/Rust/JavaScript or any other language. The perverse idea of adding dependencies without actually reading through all the code you pull in exists in basically all language ecosystems, Rust included.
[ Parent | on HN ]
Re:"Secret" Agent Exposes Azure Customers to Unauthorized Co... by jstanley on Wednesday September 15, 2021 @05:45AM (#28537131)
In C it is much more inconvenient to include external dependencies, so it's much more common for people to roll their own implementations rather than using a tried-and-tested one.
[ Parent | on HN ]
Re:"Secret" Agent Exposes Azure Customers to Unauthorized Co... by xmaayy on Wednesday September 15, 2021 @09:50AM (#28539007)
Or copy in a .C/.h file that gets forgotten about, and therefore gets no security updates.
[ Parent | on HN ]