ashitlerferad

Jim Tcl is available in the distros; at least Debian, Ubuntu, OpenBSD, FreeBSD, NetBSD, openSUSE, Source Mage, Fedora and Gentoo have it.

ISTR NT has other mechanisms for that.

Sell sell sell

A recent manifesto around that: http://pastebin.com/raw/0SNSvyjJ "Leaking documents, expropriating money from banks, and working to secure the computers of ordinary people i…

Thanks for being excellent!

Zero idea, but if you get an answer, please put it here and or post the GPL code publicly.

ImageMagick shouldn't have been using /bin/sh or system() in the first place. Instead it should use fork+exec or libpipeline. http://bonedaddy.net/pabs3/log/20…

Shell metacharacter and option injection vulnerabilities exist in almost every language, not just C: http://bonedaddy.net/pabs3/log/2014/02/17/pid-preservation…

libpipeline is a good replacement for the more complex uses of system(): http://libpipeline.nongnu.org/

Meanwhile the supermarket probably wasted many kilos of food the night before and locked the bin they threw it into. That is the crime that should be punished.

Another fuzzer, quite amazing one actually (it managed to create PNG/JPEG images from fuzzing). http://lcamtuf.coredump.cx/afl/ …

I'm not sure about the bounds sanitiser, but the address sanitiser is not meant to be used as a hardening mechanism and allows trivial exploits: http://seclists.org/oss-sec/2…

Exploitation of some of those issues can be prevented using the new RAP GCC plugin by grsecurity. Unfortunately, it is only available to paying customers. https://grsecurity.net/rap_an…

Using DNS is the start of the flaw.

Will you be getting this merged into LLVM upstream?

Sounds like the LLVM project should be using the GPL. This constant churn kind of turns the MIT license into the GPL but only for small companies and individuals who can't keep up with the churn.…

I think that makes them more trustworthy. If some open source software has never seen a CVE, then that is because no-one actually looked at it in depth enough. All software has bugs and security issue…