> I don't understand the desperate need to paint all modern C++ code bases as dangerously unsafe. Because the idea that security vulnerabilities can be fixed b

> I don't understand the desperate need to paint all modern C++ code bases as dangerously unsafe. Because the idea that security vulnerabilities can be fixed by just "modernizing" C++ codebases is actively harming security, by discouraging investment in memory-safe languages. > It is demonstrably not true and doesn't reflect well on the motivations of those that would blindly assert it. It is demonstrably true, as http://twitter.com/lazyfishbarrel http://twitter.com/lazyfishbarrel shows. Perhaps consider that those of us who work on browsers, which are some of the largest most-attacked pieces of software in the world, would know what we are talking about.