4 ms·
There is no definitive way of knowing how many security issues are present in a piece of software or a collection of software. You can only look at history and
by CameronNemo 7y ago
There is no definitive way of knowing how many security issues are present in a piece of software or a collection of software. You can only look at history and attitudes for a project (and perhaps other factors such as language used) and extrapolate from there.
- thrwaway6318 7y ago>and perhaps other factors such as language used) and extrapolate from there. I'm curious about this statement. Which languages do you think indicate greater security, which ones tend to indicate the opposite?
- CameronNemo 7y agoLanguages with a garbage collector will be able to avoid some of the worst memory errors.
- asveikau 7y agoUsually people say it's bounds checking and preventing use after free rather than GC. It's possible to have both without GC.
- tracker1 7y agoMaybe security issues is overly broad... but poor configuration choices related to security is obviously the context here.