Return Styles: Pseud0ch, Terminal, Valhalla, NES, Geocities, Blue Moon. Entire thread

Stagefright or C/C++fright?

Name: Anonymous 2017-07-30 18:09

There is a technique called stagefright that can exploit a system by playing a video, but this is not an MPEG problem or any other video format problem. It's a C and C++ problem. Malformed data causes a C or C++ program to behave unexpectedly. The C and C++ languages not only cripple your mind, your operating system, and your hardware, they allow invaders to take over your machine by doing simple things like watching a video or generating thumbnails.

Name: Anonymous 2017-07-31 10:43

>>11
You seem overly preoccupied with incidental engineering circumstances. Considering that both languages are effectively Turing Complete please demonstrate how one TM is necessarily vulnerable where another TM is not. This is completely rhetorical of course because the answer is obvious.

You are complaining about the shitty software engineering of a library on Android devices while applying your criticism to a device agnostic language.

If your attack is on the language itself the question that should be asked must be different to the one you posed. The question must be whether it is possible to make an implementation for RUST that exposes similar vulnerabilities. If RUST is Turing Complete then the answer will almost certainly always be yes.

We can make many legitimate criticisms of the C programming language and it's derivatives but such mundane engineering problems like this one don't deserve any academic debate. It is the purview of code monkeys working for a paycheck and has nothing to do with language or structure.

Newer Posts
Don't change these.
Name: Email:
Entire Thread Thread List