News for hackers. Stuff that matters.

A comment on Why aren't there C conferences? (2018). Parent comment

Re:Why aren't there C conferences? (2018) by 7steps2much on Saturday August 27, 2022 @12:34PM (#32620698)
> I would reframe that as: "if you're ok with buffer overflow malware injection, then C is the language for you!" Nobody has yet figured out how to stop that.

Write manual bound checks and good code in general? Granted you won't be able to catch every vulnerability, but at some point other vectors are so much easier to exploit that you won't have to worry about these anymore.

[ Parent | on HN ]
Re:Why aren't there C conferences? (2018) by burntsushi on Saturday August 27, 2022 @12:42PM (#32620769)
Oh, of course! Just write good code! Well kiss my grits. I can't believe the solution has been sitting here staring me in the face all this time.

I promise I'll write good code from now on. Scout's honor.

[ Parent | on HN ]
Re:Why aren't there C conferences? (2018) by 6equj5 on Saturday August 27, 2022 @12:46PM (#32620806)
Even John Carmack thinks "writing good code" is impossible: https://youtu.be/I845O57ZSy4?t=1351 ; p
[ Parent | on HN ]
Re:Why aren't there C conferences? (2018) by WalterBright on Saturday August 27, 2022 @02:00PM (#32621477)
> Write manual bound checks and good code in general?

40 years of C buffer overflows argues that doesn't work.

[ Parent | on HN ]