undefined | Better HN

0 pointsimmanuwell2h ago0 comments

when multiple independent parties are simultaneously tripping over different holes in the same kernel, that's not bad luck, that's a systemic attack surface problem

0 comments

pjmlp1h ago

Which gets even better by still using C.

Large majority of CVEs in the update are related to memory corruption, out of bounds and use after free.

Naturally the logic and wrong permissions ones would happen regardless of the language.

sitkacknew14m ago

A strong enough type system can catch permission problems.

pjmlpnew12m ago

The solution there would be a capabilities based OS, however adoption hasn't been great on that regard.

j / k navigate · click thread line to collapse