I disagree with the premise that Software Security is a language issue. There are a lot of basics in this post. However, this is really only a small fraction

I disagree with the premise that Software Security is a language issue. There are a lot of basics in this post. However, this is really only a small fraction of the issue in application security. Just thinking back to some recent major breaches recently in the headlines, we have * failure to update (Equifax) * unencrypted backup files (Adobe breach of long ago) * A long-ago root-level compromise of 90 servers of a giant bank. * The Target breach: vendor access to network * Numerous breaches related to improper setup of AWS Also, two interesting SSL/TLS vulnerabilities had nothing to do with anything a language design can address. The GOTOFAIL and HeartBleed. In fact, someone illustrated how to make the same error in Rust (and promptly got downvoted). A good view of front-line security problems is addressed in https://www.youtube.com/watch?v=_4vSurKPl6I https://www.youtube.com/watch?v=_4vSurKPl6I (Attack Oriented Defense.) I have audited applications in many languages, from C, Clojure, .NET, Java, Perl, and Ruby. Vulnerabilities found did not relate to langsec at all.