Another Intel speculative execution vulnerability:
miniblog.
Related Posts
Looking at how my servers update themselves and the recent Copy Fail vulnerability, I'm considering an automated weekly restart to make sure services and kernels are up to date. It'd also ensure that services are correctly configured to start on boot.
Any thoughts? Feels crude.
Several security vulnerability types are due to misusing strings: command injection, SQL injection, cross-site scripting.
How far could you go with a language that didn't have strings? You might need a Prose type that's a list of Unicode chars, but only use it for printing.
Rust 1.34.0 had a security vulnerability that allowed reading/writing memory out of bounds!