Re:NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in...
by berbec on Thursday September 07, 2023 @05:38PM
(#37425955)
Is the programming language likely the issue here?
[ Parent
| on HN ]
Re:NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in...
by carstenhag on Thursday September 07, 2023 @05:51PM
(#37426097)
Well, theoretically all can be secure (in regards to buffer overflows etc). Some just forbid to shoot you in the arm. And head.
Re:NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in...
by tialaramex on Thursday September 07, 2023 @06:13PM
(#37426339)
Of course, it's not necessary to use a language where "Give control of your phone to remote attackers" is one of the possibilities at all.
General purpose languages, whether that's something like C or Rust or even Javascript are not the appropriate tool. Turing Completeness is a bad idea from a security point of view, not a wonderful feature.
Re:NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in...
by Gigachad on Thursday September 07, 2023 @06:22PM
(#37426426)
Yes, almost all of these major exploits are memory safety related and would be mostly impossible in a memory safe language.
Re:NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in...
by btilly on Thursday September 07, 2023 @06:25PM
(#37426463)
That's like asking whether it is the lack of a seatbelt that was the issue after sometime died in a car crash.
Well, of course the real issue was the car crash. But wearing a seatbelt would have sure helped!