Comment on OpenSSL Security Advisory: TLS heartbeat read overrunparentComments−zurn12y"Don't roll your own parsers" should really be up there with "Don't roll your own crypto"... and if you do, don't do it in a highly memory-unsafe language. Espcially when it's for a security critical piece of central internet infrastructure!−danielweber12yHow do the Ruby-YAML and Python-Pickle vulnerabilities get cataloged?
Comments
.. and if you do, don't do it in a highly memory-unsafe language. Espcially when it's for a security critical piece of central internet infrastructure!
How do the Ruby-YAML and Python-Pickle vulnerabilities get cataloged?