5 ms·
The number of people required was a function of the "this complex" qualifier. I can write a safe C++ app on my own. I can't write Chrome on my own.
by nothrabannosir 8y ago
The number of people required was a function of the "this complex" qualifier.
I can write a safe C++ app on my own. I can't write Chrome on my own.
- Johnny555 8y agoI can write a safe C++ app on my own But only if you don't use any external libraries, once you link in someone else's code, you can no longer be sure your program is "safe".
- stcredzero 8y agoonce you link in someone else's code, you can no longer be sure your program is "safe" This also fits in with the "keeping a secret" analogy. Good luck keeping something secret, if it has to be shared between organizations.
- chii 8y ago> I can write a safe C++ app on my own >> But only if you don't use any external libraries using an external library is not "on your own"
- dymk 8y agoCan you use the STL? What boundary is considered trusted?
- Agathos 8y agoI can trust the compiler... I hope?
- stcredzero 8y agoHope... https://www.archive.ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf https://www.archive.ece.cmu.edu/~ganger/712.fall02/papers/p7...
- Miltnoid 8y agoUse CompCert! (And C instead of C++)
- pjmlp 8y agoNot at all, check the Linux 5.0 bug introduced by a gcc "optimization" regarding UB.
- deleted 8y ago[deleted]
- chii 8y agoThe point i was making is that such boundary doesn't exist - no one can write everything "on their own". Therefore, language features to prevent a class of exploits should be a high priority when considering a project.
- Johnny555 8y agoDon't most people link at least with basic libraries to help with I/O and other standard operating system interfaces? Do many people really use the kernel syscall interface directly?