ArrowMax

Additional vendor responses by Bitwarden to put the remediations and threat models into perspective:

Bitwarden blog post

Bitwarden cryptography report

Regarding a malicious server acting under Bitwarden’s fleet: As I see it, the most vulnerable target would be an organization’s self-hosted Bitwarden server.

Getting specific factories for each problem is actually outdated. You should get a FactoryFactoryFactory instead.

Just finished an assignment for uni: Memory safety in Rust: Mechanisms and limits - a comparison to C/C++.

Fuck.

Great overview of Rust’s weaknesses and strengths:

Li et al. 2024 Rust for Linux: Understanding the Security Impact of Rust in the Linux Kernel