On Sun, May 7, 2023 at 3:35 AM Brian <[email protected]> wrote: > > I haven't read anything that confirms/denies the existence of this > possibility. Is it worth worrying about, and if so, what can be done to > mitigate it?
Go provides facilities that programs can use to avoid a heap inspection attack, but in general a program that is not extremely careful is subject to such an attack. There is an accepted proposal to make these attacks easier to avoid, but the proposal has not been implemented: https://go.dev/issue/21865. Ian -- You received this message because you are subscribed to the Google Groups "golang-nuts" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/golang-nuts/CAOyqgcXbjOsE1W7WF9b%2BJvqu7vdFH1QHq2M9_PsnjrguAin7pg%40mail.gmail.com.
