News for hackers. Stuff that matters.

A comment on This shouldn't have happened: A vulnerability postmortem. Parent comment

Re:This shouldn't have happened: A vulnerability postmortem by astrange on Thursday December 02, 2021 @12:37AM (#29412903)
It's common to exploit JavaScript engines with this kind of bug, and JS engines probably have better security teams at this point, so I expect you could get an RCE if you really tried.
[ Parent | on HN ]
Re:This shouldn't have happened: A vulnerability postmortem by saagarjha on Thursday December 02, 2021 @01:09AM (#29413059)
Yes, but those would be bugs in the runtime itself, rather than in the programming language. Java and JavaScript both define behavior of racy code; Go does not.
[ Parent | on HN ]