Re:More Memory Safety for Let's Encrypt: Deploying ntpd-rs
by twothreeone on Monday June 24, 2024 @07:09PM
(#40782125)
It continues to astonish me how little people care (i.e., it triggers the $%&@ out of me). I really appreciate the professionalism and cool rationale when faced with absolute ignorance of how shaky a foundation our "modern" software stack is built upon. This is a huge service to the community, kudos to you and many others slowly grinding out progress!
[ Parent
| on HN ]
Re:More Memory Safety for Let's Encrypt: Deploying ntpd-rs
by vmfunction on Tuesday June 25, 2024 @04:56AM
(#40786111)
Lol, shaky indeed. A business person once said, "can you imagine if machine engineer (like auto makers) behave like software engineering?".
Seems no digital system is truly secure. Moving foundational code to memory safe seems like a good first step.
Re:More Memory Safety for Let's Encrypt: Deploying ntpd-rs
by twothreeone on Tuesday June 25, 2024 @02:06PM
(#40791585)
That's because there is no such thing as "truly secure", there can only be "secure under an assumed threat model, where the attacker has these specific capabilities: ...". I agree that software engineering is getting away with chaos and insanity compared to civil or other engineering practices, which have to obey the laws of physics.
Re:More Memory Safety for Let's Encrypt: Deploying ntpd-rs
by nick238 on Tuesday June 25, 2024 @05:26PM
(#40793821)
Remind me of the One World Trade Center rebuild, and "if you want a 747-proof building, you're building a bunker".
Translate the internet to the real world, and basically every building (IP address) is getting shot at, hit by planes, nuked, bioweapons are stuffed into the mail slot, and lock-picked all day, every day.