Damus
Open in Damus
aeva · 13w
there's a hypothetical compiler exploit that i always thought was a bit out there but it was a big deal with some folks, and i haven't heard anyone talk about it in a hot minute. the gist is, you mak...
 aeva profile picture
aeva @aeva
anyways the attack boils down to there being part of your program or the program that makes your program that you are not able or willing to read (eg nobody's got time to disassemble clang, and how do you know your disassembler isn't in on it too)

I just think it's funny because the slopists don't even need a compiler to create those pockets once they give up trying to review anything
1
KT · 13w
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq59ypwap8a2vtt9732whltjlglsdwh085l8c6gq9k9c33ckdus4eq3w3q9y It's difficult for that to survive future updates, which might change in ways it wasn't programmed to override. It's also difficult for that to have no side effects, beyond it's specific...