zsims

Tradeoff is all the edge cases of cookies, CSRF etc. It's not a simple "cookies are better"

> The U.S. government wants everyone to abandon C/C++ -- how will they do this if they depend on SQLite3?

ABI, the same way you don't need the Linux kernel to be rewritten to remove your app dependency on C/C++

We do, I want to know if it's going to rain on my birthday

> Whilst Crowdstrike are going to cop a potentially existential-threatening amount of blame, an application shouldn't be able to do this kind of damage to an operating system.

It doesn't operate in user space, they install a kernel driver.

Blame for Flash? Or celebrated for killing Flash?

Flash was a security nightmare

There are other paths to the attack he mentioned. Eg you find an API that accepts ciphertext or part of. Or a cloud backup/restore flow. Likely you need another vulnerability but it does happen.

The problem is, it's not their software. No control over Slack, Outlook etc

Useful because you can support existing passwords without requiring everyone to login or reset their password. Still has flaws though, like password shucking.

Nix has no security guarantees, nor sandboxing primitives. So not really comparable.

I'd say at this point the most important part is "correctness" (rendering etc) and security

Doesn't that argument apply to tabs also? Eg IE6 days where there were no tabs, and everything was deferred to the OS/desktop window management. It was clunky and painful.