Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> This post was inspired by recent discussion here:

> RCE Vulnerability in QBittorrent - https://news.ycombinator.com/item?id=42004219

Worth noting that Rust will not prevent that kind of security hole:

> To be fair, this function ignoreSslErrors is not from the authors of qBittorrent, it comes from QT framework. The idea behind the function is that you provide it a small whitelist of errors you wish to ignore, for example in a Dev build you may well want to ignore self-signed errors for your Dev environment. The trouble is, you can call it with no arguments and this means you will ignore every error. This may have been misunderstood by the qBittorrent maintainers, maybe not.



Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: