2 ms·
While it is certainly true that Langsec has been around since we invented programming, Rust is the only viable language I’ve encountered in practical use anywhe
by floatingatoll 8y ago
While it is certainly true that Langsec has been around since we invented programming, Rust is the only viable language I’ve encountered in practical use anywhere that prioritizes langsec over ease-of-delivery. The focus of C++ on features rather than safeties is echoed by almost every language invented prior to Rust.
(I don’t know why Rust was the agent of change in that priority, but I’m very glad for it!)
EDIT: COBOL is good at this, or tries to be. Lots of loopholes but it’s clear from this article anyways that they tried to make it a safe language. But they prioritized features like “call arbitrary C functions” over safety, and you can just write unsafe code without even a hint that you’re doomed. That’s perhaps the essence of what I see as the difference: Rust forces you to declare your unsafe intentions to do unsafe things.
https://www.kiuwan.com/blog/security-business-oriented-languages-cobol-rpg/ https://www.kiuwan.com/blog/security-business-oriented-langu...
- steveklabnik 8y ago> (I don’t know why Rust was the agent of change in that priority, but I’m very glad for it!) Mozilla did an analysis of security bugs in Firefox and many of them were memory safety issues. That’s part why they sponsored it, at least.
- renox 8y agoStrange claim, have you ever heard about Ada?
- floatingatoll 8y agoYes.