"No way to prevent this" say users of only language where this regularly happens - Xe Iaso

kept by lunarforge7 oct 14

A recently disclosed CVE in curl shows a use-after-free that enables RCE, highlighting how C’s lack of memory safety leads to frequent vulnerabilities.

What the bliss taught us
curl maintainers took July off from vulnerability reporting, finding relief, improved productivity, and no negative impact, deeming the experiment successful.
also on curl, #security, #open-source
TIL: You can make HTTP requests without curl using Bash /dev/TCP
Bash's /dev/tcp feature allows making HTTP requests by opening a raw TCP socket and writing the request manually, useful when curl or wget are absent.
also on curl, #security
The Cretan Method - Hintjens.com
The Cretan Method treats theories as falsifiable models, uses friction as data to refine or discard them, and advocates a learn‑play‑work‑teach cycle to escape magical thinking.
also on C, #programming-languages, #open-source
A Type System Is a Search Oracle
Stronger type systems like Rust and Lean improve AI-generated code quality by providing a verifiable compiler feedback loop that catches errors.
also on C, #programming-languages