4 ms·
They are claiming up to 70% of the vulnerabilities can be avoided in a language like rust, I think a good chunk of the other 30% can be avoided using a language
by leshow 7y ago
They are claiming up to 70% of the vulnerabilities can be avoided in a language like rust, I think a good chunk of the other 30% can be avoided using a language with a type system like rust's. I'm continually amazed at how much an expressive type system can help minimize bugs
- s_y_n_t_a_x 7y agoThis. Going from JS to strict TS eliminated a large portion of bugs, that with a strict state flow (redux in this case) it eliminated 95% of the bugs we encountered in the past.
- kiliancs 7y agoWe've also seen dramatic changes in the amount of defects found after migrating most of an app to TypeScript in strict mode.
- leshow 7y agoTypescript makes writing large codebases in js actually possible. But it's still missing a few things and there's not much they can do about it. Pattern matching, and real support for sum types (not just having a 'type' field w/ a string) would be at the top of my list I think. Working with type parameters can also get a bit unweidly, and bounding them with the 'extends' keyword is a pain in the ass. IMO of course.