"No way to prevent this" say users of only language where this regularly happens

https://xeiaso.net/shitposts/no-way-to-prevent-this/memory-safety/CVE-2026-41992/

31•xena•1h ago

Comments

inanutshellus•37m ago

OK how is this on the homepage? The title means nothing without clicking the link and... I generally refuse to click on clickbait just to see whether there's a hook in it.

freehorse•35m ago

Clicking on the link does not help either save the rightful first impression.

dgacmu•35m ago

It's a pun on The Onion's repeating headline about gun deaths in the US ("only country where...") [1] . I thought it was pretty clear before I clicked it it was going to be talking about security vulnerabilities in C, but I live close to that world so I might be a biased audience.

[1] https://en.wikipedia.org/wiki/%27No_Way_to_Prevent_This,%27_...

sheauwn•34m ago

My guess is its almost exclusively due to the reference its making to the similarly titled Onion article. The actual article linked is basically a cut and paste replacing gun violence with memory vulnerabilities.

casper14•36m ago

Just use JavaScript and you should be fine!

cesaref•34m ago

'the only language where 90% of the world's memory safety vulnerabilities have occurred in the last 50 years'

Let's assume this is true, and ignoring the fact that it's not possible for more than 1 language to have >50% of the vulnerabilities, we are left pondering what proportion of the worlds software is written in C. If it's >90%, then C is safer than average :)

robmccoll•32m ago

The only language where this happens?

https://nvd.nist.gov/vuln/detail/cve-2023-53161

https://www.sentinelone.com/vulnerability-database/cve-2026-...

https://nvd.nist.gov/vuln/detail/cve-2026-71560

https://www.invicti.com/web-application-vulnerabilities/pyth...

K0nserv•28m ago

With the exception of the C++ case, these all seem to result in DDOS which, while bad, are barely security issues. It speaks to the difference between C and these other languages (Go, Python, Rust).

preommr•31m ago

wtf is this garbage?

I don't think the average C dev isn't aware that the language has pitfalls, especially around memory management.

Also a lot of these problems are because C is used everywhere and has been for so long. Not because people are blind to it's problems.

K0nserv•10m ago

The critique is more that the average, or at least loud, C programmer is resistant to fixing these problems (for example via Rust) and often arrogantly claim it's just a skill issue.

bewareofscams•21m ago

Why is it flagged?

freehorse•17m ago

Because it is shitposting maybe (that's why I flagged it). Shitposting (esp the lowest quality kind) does not seem to be leading to interesting discussions.

bewareofscams•14m ago

You are plain wrong https://news.ycombinator.com/item?id=40437379

Plaud's new earphones come with an eSIM-enabled case for talking to AI agents

Emacs 31: An unofficial guide to Markdown-ts-mode

Sunshine

EU slips further behind China, US in race for critical minerals

Mljar Studio: The Claude Code for Data Science

Why LLMs keep failing their Big Five personality tests

Show HN: RealDiff – runtime behavior diffing for pull requests (six languages)

Cohere Parse: Enterprise document intelligence at scale

Show HN: KnotQ – Calendar and Organization Planner

The Breed Is Back Commodore Is Back Alien Breed 35th Anniversary Collection [video]

I didn't plan to let an AI manage my to-do list

Piloting the first double-blind AI evaluations

Aphantasia Beginner's Guide

A self-hostable MCP for all your connections, memory, skills, and secrets

US Government Designates Host of Noblogs.org a "Global Terrorist"

Show HN: BirthdayVideoAI – AI birthday video maker for wishes, invitations

Building my first SaaS without a coding background

Hot Chips 2026: Fujitsu's Monaka CPU – By Chester Lam

Hot Chips 2026: Intel's Crescent Island – By George Cozma

No moving average wins twice

MIT's Ad Hoc Committee on AI Use in Teaching, Learning, and Research Training

Shieldprompt – test your LLM against prompt injection – no dependencies

Confdiff – semantic diff for config files (JSON/YAML/TOML) that redacts secrets

Another Webpage Screenshot and OG Image Generation API

The difference orbit inclination makes

Poisson Rate Limiting (2024)

Coming Soon

How would you know whether an ancient culture had zero?

Are You Sure You Want a Car with a Giant Touch Screen?

Show HN: MP4 to Transcript – Convert MP4 to Text Online