News for hackers. Stuff that matters.

A comment on Third High Severity CVE in Log4j Is Published. Parent comment

Re:Third High Severity CVE in Log4j Is Published by querulous on Saturday December 18, 2021 @04:55PM (#29608922)
it's definitely time for a language with a capabilities based security model that allows scope to the function/method level, at minimum

not just for security either. i can't count the number of times i've traced a performance problem or bug to a piece of code that was doing some io when it didn't need to

[ Parent | on HN ]
Re:Third High Severity CVE in Log4j Is Published by staticassertion on Saturday December 18, 2021 @05:57PM (#29609481)
Agreed. In a capabilities system you'd see that, for some reason, your logger requires all sorts of absurd capabilities for no reason.
[ Parent | on HN ]
Re:Third High Severity CVE in Log4j Is Published by hyiltiz on Monday December 20, 2021 @04:06AM (#29622720)
Haskell comes to mind?
[ Parent | on HN ]