logoalt Hacker News

ianm218yesterday at 7:40 PM1 replyview on HN

Hmm I view open source as purely positive sum. Valkey was forked from Redis in the first place.

But this is more about memory safety - you can have immense respect for the giants who built these tools but also be worried that memory safety might become an even bigger deal. If someone found a memory zero day in nginx or openSSL for example that is a very big deal!

I think this is one strategy we should look into, hopefully people in the C community look into other options like project Glasswing/ next generation fuzzers etc. When the world of security is changing so fast it is good to get a lot of shots on net.


Replies

0x000xca0xfeyesterday at 8:43 PM

And what if someone gets pwned by a bog standard logic or input validation bug in your slopped together "nginx" that is not present in the original?

show 2 replies