Re:OpenSSL Security Advisory (14 December 2021)
by wepple on Tuesday December 14, 2021 @04:42PM
(#29558309)
Really not a value-add contribution. A lot of software that has existed forever is written in C by unpaid volunteers; are you planning to rewrite it in rust?
Further, snark could be made about how this will have near zero security impact yet there’s a far more serious bug (log4j) which has already had significant cost and follows endless patterns of Java developers embedding logic flow in untrusted data. “Just don’t use Java lol” etc
Edit: Hahaha, hey David. Had no idea that was you.
Further, snark could be made about how this will have near zero security impact yet there’s a far more serious bug (log4j) which has already had significant cost and follows endless patterns of Java developers embedding logic flow in untrusted data. “Just don’t use Java lol” etc
Edit: Hahaha, hey David. Had no idea that was you.