cargo-auditable with Sergey Davidoff
Rustacean Station
00:00
Is There a Heap Buffer Overflow in My Browser?
"I reported this issue in a bunch of like crashes that were not exploitable," he says. "And the response I got was, if they file a CVE for every such bodily fix, they will never get any actual word" The maintainer said it's an open source project and doesn't have the manpower to keep up with CVEs. 'It kind of shattered my faith in humanity? Because at that point, Linux was considered the secure system'
Transcript
Play full episode
