Post #1253968
2026-04-09 14:59 UTC
@budududuroiu @jenniferplusplus Let's talk about JavaScript. Have you ever looked at your browser's developer console? On any major website on the planet, there are 8 trillion errors in every one. Two-thirds of them are vulnerabilities, but none of them are exploitable or matter for anything at all. That is what is being found.
Those kinds of errors I've been reviewing, all the ones Daniel's been reviewing too, and I'm seeing it over and over. "Yes, okay, technically that is the buffer overrun, but it doesn't matter because you can't ever get to it!"
Replies (1)
-
@worik@mastodon.social 2026-04-10 06:59
@Sempf @budududuroiu @jenniferplusplus Yes, that is Javascript culture In other cultures clean builds are mandatory Impossible, or way too hard, in the fragmented browser world. That said: that is a chilling excuse to allow a buffer over run. The technical term is "famous last words"