Conversation

Notices

1. Embed this notice
   Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Wednesday, 10-Apr-2024 18:31:21 JST Haelwenn /элвэн/ :triskell:
   Oh this is nice, CVE-2024-24576 is a vulnerability in the Rust stdlib, at least it's for Windows.
   
   Imagine having to recompile *all* things Rust.
   • 翠星石 and narcolepsy and alcoholism :flag: like this.
   • Embed this notice
     narcolepsy and alcoholism :flag: (hj@shigusegubu.club)'s status on Wednesday, 10-Apr-2024 18:33:24 JST narcolepsy and alcoholism :flag:

     in reply to
     @lanodan this snibs the snab 🦀
   • Embed this notice
     Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Wednesday, 10-Apr-2024 18:33:51 JST Haelwenn /элвэн/ :triskell:

     in reply to
     And at least it's stdlib so likely not one of those pinned things where you'd also need to apply patches which in some cases would likely trigger compatibility issues.
   • Embed this notice
     Your New Marijuana Injecting Waifu :weed: (sjw@bae.st)'s status on Wednesday, 10-Apr-2024 20:14:51 JST Your New Marijuana Injecting Waifu :weed:

     in reply to
     @lanodan lmao remember when the Whitehouse endorsed rust because it was more secure than C?
     Haelwenn /элвэн/ :triskell: likes this.
   • Embed this notice
     Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Wednesday, 10-Apr-2024 20:18:42 JST Haelwenn /элвэн/ :triskell:

     in reply to

     • Your New Marijuana Injecting Waifu :weed:
     @sjw Well it still quite is, specially as C also has it's share of past vulnerabilities in various libc implementations, in fact the last one from glibc (CVE-2023-4911 aka Looney Tunables) was seriously nasty.
   • Embed this notice
     Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Wednesday, 10-Apr-2024 21:47:49 JST Haelwenn /элвэн/ :triskell:

     in reply to

     • Your New Marijuana Injecting Waifu :weed:
     @sjw AFAIK musl only had one and in a pretty niche function, wcsnrtombs (who uses wchar_t in 202x…): https://www.openwall.com/lists/musl/2020/11/19/1
     
     And ⑨ I'm not sure, I know 9front had a bug in something like werc that lead to 4chan injecting commands on their server but Plan9 is pretty old, in fact it predates the CVE system.
   • Embed this notice
     Your New Marijuana Injecting Waifu :weed: (sjw@bae.st)'s status on Wednesday, 10-Apr-2024 21:47:51 JST Your New Marijuana Injecting Waifu :weed:

     in reply to
     @lanodan what about musl or :9front:?