hirihit640@sh.itjust.works to Cybersecurity@sh.itjust.worksEnglish · 28 days agoGoogle pays $250K for Linux vulnerability allowing guest VM escapesarstechnica.comexternal-linkmessage-square7linkfedilinkarrow-up147arrow-down11cross-posted to: [email protected]
arrow-up146arrow-down1external-linkGoogle pays $250K for Linux vulnerability allowing guest VM escapesarstechnica.comhirihit640@sh.itjust.works to Cybersecurity@sh.itjust.worksEnglish · 28 days agomessage-square7linkfedilinkcross-posted to: [email protected]
minus-squareOnno (VK6FLAB)@lemmy.radiolinkfedilinkEnglisharrow-up7arrow-down1·28 days agoAnd if you think that migration to Rust will magically remove all bugs and vulnerabilities, you haven’t been writing software for very long.
minus-squareMuehe@lemmy.mllinkfedilinkEnglisharrow-up6arrow-down1·28 days agoNobody said it would? But both of these vulnerabilities were use-after-free, so using Rust would probably have helped here (you know if Rust had been a thing back when they were introduced).
minus-squaresun_is_ra@sh.itjust.workslinkfedilinkEnglisharrow-up2arrow-down1·27 days agoIt would solve this kind of bugs for sure
minus-squareOnno (VK6FLAB)@lemmy.radiolinkfedilinkEnglisharrow-up6arrow-down1·27 days ago… and replace them with a whole new class of bugs. Source: I’ve been writing software since 1982.
And if you think that migration to Rust will magically remove all bugs and vulnerabilities, you haven’t been writing software for very long.
Nobody said it would? But both of these vulnerabilities were use-after-free, so using Rust would probably have helped here (you know if Rust had been a thing back when they were introduced).
It would solve this kind of bugs for sure
… and replace them with a whole new class of bugs.
Source: I’ve been writing software since 1982.