3 ms·
> Then how do you explain the fact that some of the most secure pieces of software ever written were written in C? (I'm thinking of, e.g., Qmail — and pretty mu
by gherkin0 11y ago
> Then how do you explain the fact that some of the most secure pieces of software ever written were written in C? (I'm thinking of, e.g., Qmail — and pretty much everything else DJB has ever written — and OpenBSD, just to name a couple off the top of my head.)
Unusual amounts of manual effort by unusually skilled people, probably using unusually security-focused development processes?
- nickpsecurity 11y agoExactly. Freak occurrences never disprove the rule. Most were simple, too, to the point that it's easier to get right. Large one's like OpenBSD had plenty of bugs during the development process. Many problems in small and large are prevented with a language that doesn't introduce them. Rest has to be caught with other methods. A good language can still help, though, if it's easier to analyze.