Hacker News

points by bigyabai 2 days ago | 0 comments

You willingly let "perfect" be the enemy of "good" in this case. It's absolutely possible to build software runtimes that obviate this type of nonsense. It's not grandstanding by elite developers, most of these choices are common-sense mitigations.

[–] sreekanth850 2 days ago

--Another vulnerability in ssh accounts that should never take a password at all (root, your key-only deploy user, ldap users, the default user on alpine's aws and azure images) take any password longer than 256 characters. I guess these also belongs to your common sense mitigation category but this has been there since 2016. -- struct's lifetime requirements can be bypassed via covariant field assignment, 11 year old rust compiler bug. how about this?

[–] bigyabai 1 day ago

Reread both of our comments. You are complaining about an LDAP bug and a Rustc issue, the sky is not falling Mr. Chicken Little.