mleku on Nostr: yeah, i was shocked to learn from claude that sql injection and buffer overflow ...

yeah, i was shocked to learn from claude that sql injection and buffer overflow vulnerabilities were still common. i was taught in 2013 to always sanitize all inputs, and i do it religiously, actually, often, excessively. in my code, more often bugs are from excessive checking.

and shit like rust's GC hinting system, and their tight coupling with 5 other elements of the syntax, mean it takes as long to compile it as it does parsing the object inheritance hierarchies of C++.

instead of buffer overflows, now you find rust code has protocol vulnerabilities instead. you can't blow up its memory anymore with crafted packets but instead you can break the state machines and cause them to fail or allow privilege escalations.

one step forward, two steps back, steadily as the languages get more "advanced" and "expressive" you see a concurrent escalation of complexity, which is hard to reason about.

i don't say "Golang or GTFO" for no reason. i go a lot further than some, with this, too, because i have identified about 6 separate things in Go's syntax that leads to frequent bugs. this is why i started building a fork of Go called "moxie" but actually...

now i am building a universal language processing system based on the cayley tree, meh, idc about these details anymore. i will push that into the mathematics of the memory of the system and you just write english and it generates binary code.