←back to thread

Breaking Git with a carriage return and cloning RCE

(dgl.cx)
348 points dgl | 3 comments | 08 Jul 25 17:48 UTC | HN request time: 0.467s | source
Show context
dwrodri[dead post] ◴[08 Jul 25 18:22 UTC] No.44502622[source]▶
[flagged]
1. alexvitkov ◴[08 Jul 25 18:40 UTC] No.44502788[source]▶
We keep getting RCEs in C because tons of useful programs are written in C. If someone writes a useful program in Rust, we'll get RCEs in Rust.
replies(2): >>44503167 #>>44504743 #
2. dietr1ch ◴[08 Jul 25 19:24 UTC] No.44503167[source]▶
It's not that only C programs are useful. It's that subtle mistakes on C result in more catastrophic vulnerabilities.

Make a mistake in application code in a language like, say Java, and you'll end up with an exception.

3. umanwizard ◴[08 Jul 25 22:52 UTC] No.44504743[source]▶
There are a lot of useful programs written in Rust nowadays. This comment might have made more sense like 5 years ago.