hirihit640@sh.itjust.works to Cybersecurity@sh.itjust.worksEnglish · 2 months agoGoogle pays $250K for Linux vulnerability allowing guest VM escapesarstechnica.comexternal-linkmessage-square6linkfedilinkarrow-up11arrow-down10cross-posted to: selfhosted@lemmy.world
arrow-up11arrow-down1external-linkGoogle pays $250K for Linux vulnerability allowing guest VM escapesarstechnica.comhirihit640@sh.itjust.works to Cybersecurity@sh.itjust.worksEnglish · 2 months agomessage-square6linkfedilinkcross-posted to: selfhosted@lemmy.world
minus-squareOnno (VK6FLAB)@lemmy.radiolinkfedilinkEnglisharrow-up0·2 months agoAnd if you think that migration to Rust will magically remove all bugs and vulnerabilities, you haven’t been writing software for very long.
minus-squareMuehe@lemmy.mllinkfedilinkEnglisharrow-up0·2 months agoNobody said it would? But both of these vulnerabilities were use-after-free, so using Rust would probably have helped here (you know if Rust had been a thing back when they were introduced).
minus-squaresun_is_ra@sh.itjust.workslinkfedilinkEnglisharrow-up0·2 months agoIt would solve this kind of bugs for sure
minus-squareOnno (VK6FLAB)@lemmy.radiolinkfedilinkEnglisharrow-up0·2 months ago… and replace them with a whole new class of bugs. Source: I’ve been writing software since 1982.
And if you think that migration to Rust will magically remove all bugs and vulnerabilities, you haven’t been writing software for very long.
Nobody said it would? But both of these vulnerabilities were use-after-free, so using Rust would probably have helped here (you know if Rust had been a thing back when they were introduced).
It would solve this kind of bugs for sure
… and replace them with a whole new class of bugs.
Source: I’ve been writing software since 1982.