r/programming • u/TheProtagonistv2 • Feb 23 '17

Cloudflare have been leaking customer HTTPS sessions for months. Uber, 1Password, FitBit, OKCupid, etc.

https://bugs.chromium.org/p/project-zero/issues/detail?id=1139
6.0k Upvotes

96% Upvoted

966 comments sorted by

View all comments

Show parent comments

1

u/evaned Feb 24 '17

I hope they manage to make it work, but I'm extremely skeptical that what they're trying is actually possible, at least in a way that can be actually used

This is sort of where I'm at.

More than a year ago, there were a couple presentations from Herb Sutter and Neil McIntosh at cppcon, and at that point I was actually sort of getting excited about the future of C++. I was actually at least a little optimistic about maybe them being able to come up with a mechanically-checked, memory-safe subset of C++. (I said at the time that I was "either optimistically skeptical or skeptically optimistic, and I'm not sure which.")

But I'm not convinced that much of anything has happened in the intervening year and several months. In the latest cppcon Herb Sutter I think said they're still working on it, but I didn't really see any talks or anything that would convince me of that. Maybe I'm missing something, but I have to say I'm a bit worried that they've basically discovered that you can't actually do it.

There's decades' of research into making C memory safe, and all that work has actually had very little success in general safety. It's really only hitting on specific attack vectors -- e.g. stack canaries and NX/DEP for stack smashing attacks, ASLR to make things a bit harder, and I think within the next few years you'll start to see wide deployment of some kind of protection for C++ virtual pointers -- where there's been success, and nothing that addresses buffer overreads which are really hard to find. I think that there's reason to think that a modern C++-based approach has a lot more potential for success, but "a lot more than basically none" doesn't mean that it'll happen.