Memory Safe Languages in Android 13

Re:Memory Safe Languages in Android 13 by chlorion on Thursday December 01, 2022 @06:26PM (#33824537)

There were (or are?) some older call of duty games being sold on steam that had unpatched RCE vulnerabilities in them. Simply joining a server ran by a malicious host can result in the players system being totally compromised.

These games would go on sale once a year or whatever and attract new players, and people would post warnings in the steam forums and whatnot to try to stop people from being effected by the issue, but I am sure some people either didn't listen or didn't notice the warnings.

I haven't looked into the issue in a few years at this point, but it's very possible that the games are still unpatched and being listed in the store to this day.

Anything that connects to the internet needs to be strongly concerned about security!

[ Parent | on HN ]

Re:Memory Safe Languages in Android 13 by kaba0 on Friday December 02, 2022 @02:20AM (#33827820)

That’s why managed languages in itself are not enough. Security on desktop OSs are a joke, with perhaps mac being a bit ahead than the rest.

But especially desktop linux.. every random bash script could encrypt your documents, or leak out your browser cache, do whatever it wants..

[ Parent | on HN ]

Re:Memory Safe Languages in Android 13 by HideousKojima on Friday December 02, 2022 @02:22AM (#33827827)

Similarly there was an RCE discovered in Dark Souls III about a year ago. And even though modders had s fix for it before the details of the exploit were even publicly revealed, it took the devs 8 months or so to finally fix it.

[ Parent | on HN ]