Why isn't it a firable offense to choose to use C in a security sensitive setting? Hint: about any setting is security sensitive these days.https://twitter.com/Ngnghm/status/688950737624260609 …
Don't execute untrusted code in a leaky sandbox. And unless you're building the sandbox, still don't use C, or be fired.
-
-
All sandboxes are leaky, and you can't trust code unless you wrote the code and the compiler too.
-
Still not an argument for using C except when patching sandboxes. Also I don't trust code I write more than a specialist's.
- 5 more replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.
Read my blog!