Hacker News Reader

does this "vulnerability" disclosure and its ongoing fix support the idea that more people are looking at the code and finding faults, before they get exploited in the wild, making the software "better"? as opposed to blindly claiming "unhackable" argument, the software is getting better?

View on HN

It’s definitely making the software better.

See the MSC3917 document linked by Arathorn. They have put a lot of effort into thinking about the threat models and how to address each them.

Is it perfect? Well, no. But it’s a hard problem and they are making meaningful progress.

Nothing is unhackable but at least you have the right to patch open source projects.

Properly used formal verification, could make unhackable software, but expensive, because of this used rarely.

For example, I know people, who made formal verification of their soft for power plants.

Reply on news.ycombinator.com