>OpenBSD is secur-ACK
>>110265198time to stop using C and C++. They're shitlangs.
>>110265220>use Rust>get hacked by a zip file>cause of a 10.0 vulnerability in zip-rs>it has been fixed a month ago, but the package i am using didn't update yet>tfw. ever single rust package has to be constantly rebuilt when any dependency changes
>>110265251If they used Rust, or even C++17, this vulnerability wouldn't exist.
>>110265198(You)>thinking anything is secure
>>110265281if musl hadnt deliberately violated the c standard without considering the history of implementations this wouldnt of happened but musl was vibeslopped trash
>>110265317what does returning a "*" because options don't exist have to do with the C standard
>>110265322because they should of returned a NULL like the c standard specified
>>110265358NULL was a billion yuan mistake though?
>>110265281what makes you think that?
>>110265401because std::option exist, so no need to return a "*" which caused the bug, or a NULL which they did not want to use because it could lead to a segfault
>>110265251
>>110265405If they would have used Rust, they wouldn't have implemented a backdoor?Remember that Rust can't even parse a zip file without causing an RCE exploit.
musl only exists to offer a corpo friendly MIT licensed alternative to glibc.It has the exact same purpose of license changing Rust rewrites and is subject of the same authorities, so it implements the same fed required backdoors.Also the problem gets amplified by third party package manager bullshit, just like in Rust.The Rust zip vulnerability is still active in thousands of Rust projects because every package has to update individually.And here, the affected Alpine containers will be vulnerable for years to come, because they all have to update their containers individually.
>>110265368null is a fact of life and the mistake was the lack of language support for *! and *?, and then erroneously treating *? as *! in the optimizer
>>110265406>typing cargo add is literally the same as illegal immigrationThis is why you lost the midterms
>>110265562I'm europoor tho
>>110265198>people like OP watch these gay youtube menKill yourselves.
>>110265251>Rust has 1 10.0 vulnerability!! Ahhhh!!Meanwhile c++ has 6 billion+ and counting with no way to warn people which ones are compromised.
>>110265432All the major packages have updated. It's a none issue. Stop using obscure packages made by Ranjeet.
OpenBSD wasn't affected by this hack and nobody has even pointed that out yet...
Wasn't this some musl shit?People who use that cuck license shitware deserve it
>>110265724actually, zip-rs got made by an AWS senior Rust engineer who got laid off recently and is currently on unemployment benefits and can't find a job, looolNot joking
>>110265710I never got hacked by a zip file.That's something Rusttards can't claim.
>>110266381have you ever been hacked? There's like 6 billion ways to get hacked in c++. And how do you know c/c++ doesn't have the same vulnerability? In rust you can just type "cargo audit" after installing it with "cargo install cargo-audit" and you're good. Also crates.io gives you security updates and a list of dependents:https://crates.io/crates/zip/securityhttps://crates.io/crates/zip/reverse_dependenciesWhat does c/c++ do? Word of mouth?
>>110265198>Alpine is the same thing as OpenBSDAmerican education system at work.
>>110265198Are you trolling OP?
>>110266846OpenBSD is never going to recover from this lmao
>>110266862That would imply that BSD was widely known at all.
pufferfish wit da big ass lip
>>110265198>musldon't careglibc for me.
Microsoft really fucked up.
>>110266862Recover from a linux musl vulnerability?
>>110267449the IQ level of this entire website has been plummeting rapidly. 10 years ago everyone here was way smarter than me and now I can't stand almost anyone that posts here, I didn't get smarter...
