News for hackers. Stuff that matters.
Re:Toxic – A distributed, secure, command-line based instant... by kevan on Thursday February 12, 2015 @12:46AM (#9037602)
The last reply to the issue:

"The Tox protocol is very easy to parse in C which means little chance of issues."

Building a homegrown parser and simultaneously expecting not to have security issues, that's true confidence.

Re:Toxic – A distributed, secure, command-line based instant... by irungentoo on Thursday February 12, 2015 @07:05AM (#9038430)
If you actually read the code you will see that it's true.

The parsing is dead simple and written in a way that mistakes are very unlikely.

Re:Toxic – A distributed, secure, command-line based instant... by nfkd on Thursday February 12, 2015 @08:31PM (#9042386)
That's a really bold statement to make. And why not use a proven secure parser in the first place?