Using C code is how you get the next cloudbleed. I'm happy to pay a performance ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		lmm on June 24, 2020 \| parent \| context \| favorite \| on: Is WebP really better than JPEG? Using C code is how you get the next cloudbleed. I'm happy to pay a performance cost for the sake of memory safety.

iomcr on July 1, 2020 [–]

Fix this easily by abstracting the manipulation of user uploaded files to chroot/serverless.

lmm on July 10, 2020 | [–]

That doesn't fix the problem. The process can still fix any data that it has access to, which includes other users' confidential uploaded files.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact