Post #1971052
2026-05-04 10:36 UTC
@zeenix @pid_eins Most CVEs are completely uninteresting though, and also the CVE ratings are imaginary numbers that have little to do with reality.
I think what Lennart refers to here is issues with actual bad impact, and many memory safety issues are clearly not that unless you're a security researcher.
Replies (1)
-
@zeenix@toot.cat 2026-05-04 10:42
@slomo @pid_eins I'm not concerned with ratings or general classification. I'm referring to statistics released by Microsoft and Google etc, where 70% of the issues were simply either very hard or even impossible to achieve with a safe languages like Rust.