207
CISA Warns of Linux Kernel Use-After-Free Vulnerability Exploited in Attacks to Deploy Ransomware (cybersecuritynews.com)
submitted 10 months ago by to c/linux@lemmy.world
93 comments fedilink hide all child comments
 

This vulnerability, hidden within the netfilter: nf_tables component, allows local attackers to escalate their privileges and potentially deploy ransomware, which could severely disrupt enterprise systems worldwide.

you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 10 months ago (1 child)

Yes but the whole point is that Rust forces you to do this.

Not everybody follows best practices, sometimes people who say they do, well they make mistakes.

I really don't understand how this is conceptually difficult to grasp.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] -2 points 10 months ago*

    Rust forces you to do this until you have to use unsafe, after which it doesn't. That is not so different from C++ guaranteeing your safety until you start using raw pointers.

    It is not the compiler's job to stop the programmer from shooting themselves in the foot if they want to. It's the compiler's job to make it clear to the programmer when they disable the safety, put their finger on the trigger and aim the gun at their foot. Modern C++ does this, and if you still inadvertedly shoot yourself in the foot in spite of the warnings, you brought it on yourself.

    Regular old C, on the other hand, gives you a 9mm when you're in grade 7, safety: always off.

  • permalink
  • fedilink
  • source
  • parent