4 ms·

Quote: "It's become clear over many decades of using older languages such as C and C++ that one of the biggest causes of bugs and security vulnerabilities is ac

Quote: "It's become clear over many decades of using older languages such as C and C++ that one of the biggest causes of bugs and security vulnerabilities is accessing memory unsafely or incorrectly" Wanna bet you can write applications that have security vulnerabilities in Rust and Go just the same? Also searching on Upwork for jobs on Rust - results 47 jobs. Searching for in Go - results 213. Searching for jobs in C/C++ - results 1139. Searching for jobs in Java - results 4262.

blandflakes 6y ago
Security isn't all or nothing, though.
steveklabnik 6y ago
Fun semi-random trivia fact: Upwork ran a TV ad mentioning Rust earlier this year https://www.youtube.com/watch?v=h3yFOf6hIjQ https://www.youtube.com/watch?v=h3yFOf6hIjQ > Wanna bet you can write applications that have security vulnerabilities in Rust and Go just the same? While it's still early enough that this is an interesting bet, the data we do have shows that you'd be likely to lose that bet. Several of the largest tech companies on the planet have data showing that roughly 70% of security vulnerabilities are caused by memory unsafety. Both Rust and Go are significantly more memory safe than C and C++. Nobody would claim that either language completely eliminates security issues, but that doesn't mean that they can't help mitigate many of them.
bitfield 6y ago
Well, no one is claiming that it's impossible to write Rust or Go programs that have security vulnerabilities—that would be a very silly thing to claim, wouldn't it? A more useful way to think about it might be to ask whether such languages make vulnerabilities less likely, and for certain types of vulnerability (buffer overflows, for example), they absolutely do.
- unnouinceput 6y ago
  Wanna bet you can do buffer overflows in Rust/Go too?
  - Xunjin 6y ago
    Hey my friend, don't be like that :) Everyone here wanna have great conversations and learn more about stuff... These kind of comments creates tons of unnecessary noise. However I will bite the bait, please show to us how :)

blandflakes 6y ago

Security isn't all or nothing, though.

steveklabnik 6y ago

Fun semi-random trivia fact: Upwork ran a TV ad mentioning Rust earlier this year https://www.youtube.com/watch?v=h3yFOf6hIjQ https://www.youtube.com/watch?v=h3yFOf6hIjQ > Wanna bet you can write applications that have security vulnerabilities in Rust and Go just the same? While it's still early enough that this is an interesting bet, the data we do have shows that you'd be likely to lose that bet. Several of the largest tech companies on the planet have data showing that roughly 70% of security vulnerabilities are caused by memory unsafety. Both Rust and Go are significantly more memory safe than C and C++. Nobody would claim that either language completely eliminates security issues, but that doesn't mean that they can't help mitigate many of them.

bitfield 6y ago

Well, no one is claiming that it's impossible to write Rust or Go programs that have security vulnerabilities—that would be a very silly thing to claim, wouldn't it? A more useful way to think about it might be to ask whether such languages make vulnerabilities less likely, and for certain types of vulnerability (buffer overflows, for example), they absolutely do.

unnouinceput 6y ago
Wanna bet you can do buffer overflows in Rust/Go too?
- Xunjin 6y ago
  Hey my friend, don't be like that :) Everyone here wanna have great conversations and learn more about stuff... These kind of comments creates tons of unnecessary noise. However I will bite the bait, please show to us how :)