ec109685
Joined 13 years ago
Joined 13 years ago
1) All parsing of hostile input happens in micro VM's
2) Re-write as fast as possible the core in a memory safe languageAs the container escapes with K8s shows, it is super tricky to get isolation right. E.g. what happens if a file you think is safe to write to is suddenly is replaced by one that isn’t.
Also Opus 5 is fine if your codebase is simple.
Their api pricing is absurdly expensive.
I read that and it feels like some theoretical thing versus causing impactful outages for workloads shaped like tailscale’s.
> The bug is a data race with tight timing constraints. It is unlikely to occur in common use.
A large customer did experience this corruption, so it's important for people with tailscale's setup update immediately.
> The developers have never been able to reproduce the bug organically and had to add special testing logic to SQLite that deliberately triggers the circumstances of the the bug in order to verify that the issue has been fixed.