Sergey Bugaev on Nostr: So basically memory unsafety vulnerabilities, at scale, are a given, as long as a ...

So basically memory unsafety vulnerabilities, at scale, are a given, as long as a process runs non-trivial C code; they're always going to happen. It makes no sense to blame particular instances of vulnerabilities being accidentally introduced, that's just how things are. And it's on hardware designers, and us, systems designers, to introduce mitigations to try and protect against the vulnerabilities in ways other than just not writing them.

Or, we could RiiR 🙂