Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

It's kind of ridiculous how few lines of code can trigger such a huge and complex discussion about thread safety, where almost all developers involved actually aren't really certain whether or not this can be exploited.

I just wish people would stop writing C code for libraries that consume arbitrary data.



Yes, please stop writing C and C++ code! (... and leave the high paying jobs to us of course)


In this case it doesn't matter whether it's C or Rust. Both languages, if using their default string formatting facilities, are vulnerable.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: