Post #1957595
2026-04-29 17:11 UTC
“The clearest example is kill -1 (CVE-2026-35369). GNU reads -1 as “signal 1” and asks for a PID. uutils read it as “send the default signal to PID -1”, which on Linux means every process you can see. Yikes!”
wat
Replies (2)
-
@mxey@hachyderm.io 2026-04-29 17:12
The uutils debacle reminds me of the old metric of code quality: WTFs per minute
-
@mxey@hachyderm.io 2026-04-29 17:14
“When I think of “idiomatic Rust”, correctness is not the first thing that comes to mind. After all, isn’t that the compiler’s job?” well that explains a lot