{"id":49056121,"user":"uecker","time":1785056684,"time_ago":"2 days ago","type":"comment","content":"

As a user you should be far more worried about running up-to-date software and supply chain risks rather than zero-days related to memory safety.","comments":[{"id":49056304,"user":"naasking","time":1785058509,"time_ago":"2 days ago","type":"comment","content":"

You wouldn't have to worry so much about running up to date software if memory safety were pervasive.","comments":[{"id":49056386,"user":"uecker","time":1785059435,"time_ago":"2 days ago","type":"comment","content":"

This is wrong as there are many other safety issues to worry about.","comments":[{"id":49057074,"user":"inigyou","time":1785065890,"time_ago":"2 days ago","type":"comment","content":"

But memory safety is one of the big ones.","comments":[{"id":49057137,"user":"uecker","time":1785066477,"time_ago":"2 days ago","type":"comment","content":"

Most people I know that had security incidents did not have this because of memory safety issues. But it does not matter, even without memory safety issues out of the picture, you would need to update your software and be wary of supply chain attacks.

(Actually, I can't remember a single incident where somebody I knew was directly affected by a memory safety issue)","comments":[{"id":49058068,"user":"Pooge","time":1785072758,"time_ago":"2 days ago","type":"comment","content":"

> I can't remember a single incident where somebody I knew was directly affected by a memory safety issue

That doesn't mean the issue is nonexistent. See this article by Microsoft that shows the percentages of fixed CVEs that are related to memory safety.[1]

[1]: https://www.microsoft.com/en-us/msrc/blog/2019/07/we-need-a-...","comments":[],"comments_count":0,"level":4,"url":"item?id=49058068"},{"id":49058997,"user":"inigyou","time":1785079037,"time_ago":"2 days ago","type":"comment","content":"

Memory corruption is among the hardest things to exploit but also the most powerful. It used to be easier before things like ASLR and NX-stack.","comments":[],"comments_count":0,"level":4,"url":"item?id=49058997"}],"comments_count":2,"level":3,"url":"item?id=49057137"}],"comments_count":3,"level":2,"url":"item?id=49057074"}],"comments_count":4,"level":1,"url":"item?id=49056386"}],"comments_count":5,"level":0,"url":"item?id=49056304"}],"comments_count":6,"url":"item?id=49056121"}

Comment by uecker