3 ms·
It looks to you. IMO secure software comes from knowledge and care as much as from a safer language, if not more. But then there is performance, in which what
by gens 10y ago
It looks to you.
IMO secure software comes from knowledge and care as much as from a safer language, if not more. But then there is performance, in which what no "modern" "safe" language even comes close to C.
>Meanwhile the CVE database maintainers and black hats appreciate this mentality.
And how much of CVE-worthy software is not written in C ?
- pjmlp 10y ago> in which what no "modern" "safe" language even comes close to C. Modula-2 and Pascal dialects were as fast as C back in the 80's and 90's, before the industry decided to settle on C as UNIX got adopted and just like node.js and JavaScript, C escaped outside UNIX. The quality of C code in home computers was a joke even to junior Assembly programmers. Of course C is fast in 2016, with UB all over the place and 40 years of research in compiler optimizations taking advantage of it. > And how much of CVE-worthy software is not written in C ? And how much software is written in C without any need of doing so? But never mind, the only way to convince you guys is to have CVE meltdown after meltdown, until the industry has lost so many millions that it will eventually change. Millions of dollars and euros are spent in language research, how to make C code safe, since the language got adopted. Companies sell static analysers, memory corruption tools. CPU manufactures like Oracle and Intel were forced to add instructions to handle fat pointers. Research is spent creating processors like the CHERI. I wonder how much money would have been saved if a sane language would be used instead....