hirihit640@sh.itjust.works to Cybersecurity@sh.itjust.worksEnglish · 1 month agoGoogle pays $250K for Linux vulnerability allowing guest VM escapesarstechnica.comexternal-linkmessage-square7fedilinkarrow-up147arrow-down11cross-posted to: news@lemmy.linuxuserspace.showselfhosted@lemmy.world
arrow-up146arrow-down1external-linkGoogle pays $250K for Linux vulnerability allowing guest VM escapesarstechnica.comhirihit640@sh.itjust.works to Cybersecurity@sh.itjust.worksEnglish · 1 month agomessage-square7fedilinkcross-posted to: news@lemmy.linuxuserspace.showselfhosted@lemmy.world
minus-squareOnno (VK6FLAB)@lemmy.radiolinkfedilinkEnglisharrow-up7arrow-down1·1 month agoAnd if you think that migration to Rust will magically remove all bugs and vulnerabilities, you haven’t been writing software for very long.
minus-squareMuehe@lemmy.mllinkfedilinkEnglisharrow-up6arrow-down1·1 month agoNobody said it would? But both of these vulnerabilities were use-after-free, so using Rust would probably have helped here (you know if Rust had been a thing back when they were introduced).
minus-squaresun_is_ra@sh.itjust.workslinkfedilinkEnglisharrow-up2arrow-down1·1 month agoIt would solve this kind of bugs for sure
minus-squareOnno (VK6FLAB)@lemmy.radiolinkfedilinkEnglisharrow-up6arrow-down1·1 month ago… and replace them with a whole new class of bugs. Source: I’ve been writing software since 1982.
And if you think that migration to Rust will magically remove all bugs and vulnerabilities, you haven’t been writing software for very long.
Nobody said it would? But both of these vulnerabilities were use-after-free, so using Rust would probably have helped here (you know if Rust had been a thing back when they were introduced).
It would solve this kind of bugs for sure
… and replace them with a whole new class of bugs.
Source: I’ve been writing software since 1982.