5 ms·
Top Programming Languages That Generate Software Vulnerabilities
- steverb 11y agoWhen did iOS and Android become languages?
- AnimalMuppet 11y agoInteresting. Java generates twice as many security flaws as C++ (per megabyte of source code), but C++ generates more critical flaws. .Net generates more security flaws and more critical flaws than C++. Looks like sandboxing and garbage collection aren't a cure-all...
- Recurecur 11y agoThere are two separate issues. One is how prone to security flaws the language itself is. The second is if there are library routines that introduce flaws. This study is highly dependent on the exact code base analyzed, and especially on the quality of the analysis tools with regard to false positive rate. I suspect this is largely GIGO but will try to take a deeper look at it at some point.
- peterashford 11y agoIt also showed that Java produced less critical flaws per MB than C++. So maybe sandboxing and GC are a cure-all. Depending on how you cherry-pick the results, of course
- aceofskies05 11y agosoftpedia? Really?
- koberstein 11y agoHow is it possible that a language can generate a vulnerability?