News for hackers. Stuff that matters.
Re:NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in... by berbec on Thursday September 07, 2023 @05:38PM (#37425955)
Is the programming language likely the issue here?
Re:NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in... by carstenhag on Thursday September 07, 2023 @05:51PM (#37426097)
Well, theoretically all can be secure (in regards to buffer overflows etc). Some just forbid to shoot you in the arm. And head.
Re:NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in... by tialaramex on Thursday September 07, 2023 @06:13PM (#37426339)
Of course, it's not necessary to use a language where "Give control of your phone to remote attackers" is one of the possibilities at all.

General purpose languages, whether that's something like C or Rust or even Javascript are not the appropriate tool. Turing Completeness is a bad idea from a security point of view, not a wonderful feature.

Re:NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in... by Gigachad on Thursday September 07, 2023 @06:22PM (#37426426)
Yes, almost all of these major exploits are memory safety related and would be mostly impossible in a memory safe language.
Re:NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in... by btilly on Thursday September 07, 2023 @06:25PM (#37426463)
That's like asking whether it is the lack of a seatbelt that was the issue after sometime died in a car crash.

Well, of course the real issue was the car crash. But wearing a seatbelt would have sure helped!