3 ms·
Please don't spread unnecessary fear. ("deep magic"). C is as secure as developers take their time to implement. A fantastic amount of dangerous stuff curren
by chillingeffect 11y ago
Please don't spread unnecessary fear. ("deep magic").
C is as secure as developers take their time to implement. A fantastic amount of dangerous stuff currently runs on C. C has several substandards, such as MISRA and JSF, to aid developers in writing safe C, eliminating arguments about "well-defined."
A good start is bounds checking and following MISRA. Languages like Rust make it cheaper, but security never comes for free.
- atemerev 11y agoIndeed, security never comes for free, but costs can vary tremendously. In case of C, there are layers of additional rulesets (not enforced by compiler), scrutiny and coding standards even for basic things. I do not subscribe to formal verification crowd claims, but some basic things can make great improvements. E.g. immutability by default.