3 ms·
My monthly remainder that sooner we get rid of C less everything will have less attack surface. There is a cost of old knowledge base vs. security, but unfortu
by miohtama 6y ago
My monthly remainder that sooner we get rid of C less everything will have less attack surface.
There is a cost of old knowledge base vs. security, but unfortunately those software developing companies have externalised the cost of security issues to consumers.
- ChuckNorris89 6y agoAs if switching to other programing languages would magically prevent all security flaws.
- Corrado 6y agoActually, there are several languages that make these types of flaws difficult or impossible to create. So, while rewriting software in another language is not a magical fix, but it does actually help in the long run.
- miohtama 6y agoMemory safety issues are 70% of all security flaws. Here is a good study from Google https://www.chromium.org/Home/chromium-security/memory-safety https://www.chromium.org/Home/chromium-security/memory-safet... This is Google codebase, so it would be the safest of the safest in the world, with least prone to human error and having all kind of ceremony and processes just to avoid these in C/C++. I assume the % is much higher e.g. for your average software engineer working with IoT devices.