points by esseph 1 day ago | 0 comments
> This "era of constant exploits/patches" is not normal and can't go on. Currently it is an ongoing cat and mouse game, but it doesn't have to be.
Security is always reactive by its very nature. You can do proactive things, but you will always be reactive to novel attacks.
Expect everything to have various levels of rolling upgrades, and soon. That's a lot of work.
[–] weinzierl 1 day ago
[–] cowlevel 17 hours ago
Most door locks are easy to pick btw. They're not protecting you with technical excellence, they're protecting you by making the thief spend a little time so the neighbours might see him.
[–] esseph 16 hours ago
> but modern languages, tooling and formal methods will hopefully mitigate that enough.
No, they won't :) This is the world now.
When it comes to software it hasn't always been the case. Before the Internet software was considered something stable and even now there are areas, like functional safety critical software, where this is true to some degree.
It's not that it can't be done.
It used to be expensive to a certain extent it will stay expensive, but modern languages, tooling and formal methods will hopefully mitigate that enough.