4 ms·

Coverity is expensive and majority of software people use are open-source which don't make use of it(hence all the CVEs). As an end user running a server, i ve

by xfer 9y ago

Coverity is expensive and majority of software people use are open-source which don't make use of it(hence all the CVEs). As an end user running a server, i very much care about whether my web server has vulnerabilities. And the promise about safety is not vague, it has clearly defined semantics. To comment on your last point, it's seeing some light already, ripgrep is already beating grep in performance and is purely written in rust. And i agree that this is how rust will beat C++(if ever), by writing "better" tools than those already exist.

AstralStorm 9y ago
Then why Ada isn't used more in servers? See, people don't care about safety, they tend to want the language to get out of the way. C++ does that because it does not get in the way of a C standard library. Or other system specific stuff. Rust gets in the way enough that the benefit seems not worth it, and it brings few benefit in the server space over, say, Java if performance is not the paramount concern.
jlarocco 9y ago
> Coverity is expensive and majority of software people use are open-source which don't make use of it(hence all the CVEs). It's definitely an area where the closed source tools are ahead of the OSS alternatives, but there are open source (and free closed source) alternatives to Coverity. PVS Studio, for example, has a free download: https://www.viva64.com/en/pvs-studio/ https://www.viva64.com/en/pvs-studio/ > As an end user running a server, i very much care about whether my web server has vulnerabilities. And the promise about safety is not vague, it has clearly defined semantics. You say that, yet you're still running a ton of software written in C and C++.
- mmstick 9y ago
  > You say that, yet you're still running a ton of software written in C and C++. Nice assumption. Much of the software I use is actually implemented in Rust. And soon, I'll be using an operating system that's 100% written in Rust, with a 100% Rust Servo-powered web browser. It's only a matter of time. In addition, I've also implemented my servers (web server included) in Rust, and they have zero dependencies upon C/C++ software, so your entire point is rendered invalid.

by xfer 9y ago

AstralStorm 9y ago

Then why Ada isn't used more in servers? See, people don't care about safety, they tend to want the language to get out of the way. C++ does that because it does not get in the way of a C standard library. Or other system specific stuff. Rust gets in the way enough that the benefit seems not worth it, and it brings few benefit in the server space over, say, Java if performance is not the paramount concern.

jlarocco 9y ago

> Coverity is expensive and majority of software people use are open-source which don't make use of it(hence all the CVEs). It's definitely an area where the closed source tools are ahead of the OSS alternatives, but there are open source (and free closed source) alternatives to Coverity. PVS Studio, for example, has a free download: https://www.viva64.com/en/pvs-studio/ https://www.viva64.com/en/pvs-studio/ > As an end user running a server, i very much care about whether my web server has vulnerabilities. And the promise about safety is not vague, it has clearly defined semantics. You say that, yet you're still running a ton of software written in C and C++.

mmstick 9y ago
> You say that, yet you're still running a ton of software written in C and C++. Nice assumption. Much of the software I use is actually implemented in Rust. And soon, I'll be using an operating system that's 100% written in Rust, with a 100% Rust Servo-powered web browser. It's only a matter of time. In addition, I've also implemented my servers (web server included) in Rust, and they have zero dependencies upon C/C++ software, so your entire point is rendered invalid.