Helm local code execution via a malicious chart

But I thought security vulnerabilities couldn't happen in memory-safe languages!

But I thought accidents wouldn't happen if we wear helmets! Clearly they're worthless!

This isn't a memory bug.

Sarcasm aside: wearing a helmet causes riders to take more risks, leading to more accidents.

https://www.sciencedirect.com/science/article/pii/S136984781...

I’d still wear one, but also try to be more careful knowing that the helmet provides a false sense of security.

I do believe the analogy holds very true with programming habits.

Did you read the abstract? It says the exact opposite:

> this systematic review found little to no support for the hypothesis bicycle helmet use is associated with engaging in risky behaviour.

And Helm isn't written in Rust, so their snark was doubly misplaced

Fwiw, Go is also considered memory-safe although not as strict as Rust

What! You’re lying!

I would argue that not sanitising strings is analogous to a form of memory unsafety. You take as an input, an opaque blob of bytes that you then pass on to a myriad of other libraries and pieces of code. Nothing is captured in the types other than "String". Mainstream programming languages need to make it easier to define new types and parse strings into them. Rust is very promising in this area, as it features algebraic data types.