News for hackers. Stuff that matters.

A comment on Bytecode Breakdown: Unraveling Factorio's Lua Security Flaws. Parent comment

Re:Bytecode Breakdown: Unraveling Factorio's Lua Security Flaws by JustAPerson on Saturday June 29, 2024 @12:44PM (#40831800)
Eventually every game developer learns the hard way that they must remove the bytecode ability from lua's loadstring() function.

E.g. here's a 12 year old blogpost on the topic from the ROBLOX developers: https://archive.is/oXPyM

To be honest, it would probably be better off disabled by default. Its legitimate uses are pretty niche.

[ Parent | on HN ]
Re:Bytecode Breakdown: Unraveling Factorio's Lua Security Flaws by wruza on Saturday June 29, 2024 @02:27PM (#40832513)
Yep, its place is in luaconf.h really.
[ Parent | on HN ]