3 ms·
Are you sure you're not thinking of C? At any rate I'm not sure that you can say much more than C is a popular language, and thus has a larger share of poorly
by d0lph 11y ago
Are you sure you're not thinking of C?
At any rate I'm not sure that you can say much more than C is a popular language, and thus has a larger share of poorly written code. It _would_ be nice to see the number of security flaws in a given language graphed against language popularity, but I don't buy that code written in one language or another is necessarily more or less secure.
- pcwalton 11y ago> Are you sure you're not thinking of C? Yes. Modern C++ is neither memory safe in theory nor memory safe in practice. > I don't buy that code written in one language or another is necessarily more or less secure. The entire security industry, more or less, disagrees with you. Though I should qualify this with the obvious statements that (a) dynamic languages admit classes of security bugs that static ones don't; (b) no language will magically eliminate all security bugs. But it's just an empirical fact that C and C++ admit lots of memory safety bugs that result in security problems way, way more often than memory-safe languages do.