Re:Nvidia Security Team: “What if we just stopped using C?”
by danenania on Monday November 07, 2022 @11:29AM
(#33508000)
“...when 'language-level memory safety' is essential for security, then there's something fundamentally wrong with the sandbox the compiled C code runs in.”
Doesn’t the problem then just become what do you write the sandbox in? If you have security-critical code that can’t be sandboxed, because it is the sandbox, then it seems that language-level safety is your only remaining defense?
Re:Nvidia Security Team: “What if we just stopped using C?”
by flohofwoe on Monday November 07, 2022 @11:32AM
(#33508044)
Yes, it definitely makes a lot of sense to write the sandbox in a memory safe language like Rust. Not even the most die hard C fan would argue against that ;)
Doesn’t the problem then just become what do you write the sandbox in? If you have security-critical code that can’t be sandboxed, because it is the sandbox, then it seems that language-level safety is your only remaining defense?