I don't know much about this, but was wondering.
I always thought of Javascript as just a client side browser language. Could Javascript be used to replace something like DNS functions?
Google, Red Hat discover critical DNS security flaw that enables malware to infect entire internet
Quote:
|
The buffer overflow would then make it possible for an attacker to remotely execute code and take over the computer, and they could perform this exact same attack on machines all over the world, as the code containing the flaw has been in use since May 2008 and affected all versions of glibc since version 2.9.
|
Quote:
|
"The hard truth is that if this code was written in JavaScript, it wouldn't have been vulnerable. We can do better than that. We need to develop and fund the infrastructure, both technical and organisational, that defends and maintains the foundations of the global economy."
|
A Skeleton Key of Unknown Strength | Dan Kaminsky's Blog
Quote:
|
Somewhere between base arithmetic and x86 is a sandbox people can’t just walk in and out of. To put it bluntly, if this code had been written in JavaScript – yes, really – it wouldn’t have been vulnerable. Even if this network exposed code remained in C, and was just compiled to JavaScript via Emscripten, it still would not have been vulnerable.
|
I am old and get confused.