Get the latest tech news
"No way to prevent this" say users of only language where this regularly happens
Xe Iaso's personal website.
- Photo by Andrea Piacquadio, source: PexelsIn the hours following the release of CVE-2024-4323 for the project Fluent Bit, site reliability workers and systems administrators scrambled to desperately rebuild and patch all their systems to fix a vulnerability in HTTP parsing code that allows for heap corruption and arbitrary code execution by making a HTTP GET request with a megabyte of the letter 'A' in its body. "This was a terrible tragedy, but sometimes these things just happen and there's nothing anyone can do to stop them," said programmer Prince Marcel O'Keefe, echoing statements expressed by hundreds of thousands of programmers who use the only language where 90% of the world's memory safety vulnerabilities have occurred in the last 50 years, and whose projects are 20 times more likely to have security vulnerabilities. At press time, users of the only programming language in the world where these vulnerabilities regularly happen once or twice per quarter for the last eight years were referring to themselves and their situation as "helpless."
Or read this on Hacker News