2 ms·
Easy counterexample: most of the computers worldwide run Linux kernel, which is written in C, and kernel exploits, especially those that are accessible from th
by ActorNightly 6y ago
Easy counterexample: most of the computers worldwide run Linux kernel, which is written in C, and kernel exploits, especially those that are accessible from the web, are significantly rarer compared to the higher level exploits in CRUD APIs or LAMP stacks that work on the http protocol level and the authentication state machines.
This argument doesn't make sense. Yes, programmers make mistakes. Yes, they shouldn't make those mistakes. My point is that its not difficult to write safe C code if you follow some basic rules.
- Nursie 6y ago> Easy counterexample: The linux kernel is not really a counterexample here, and neither would I call the decades of security hardening that's gone into it "easy"... > Yes, programmers make mistakes. And in some languages those mistakes have far worse consequences than others, and more types of mistakes are possible. > My point is that its not difficult to write safe C code if you follow some basic rules. Except it is more difficult, for a start because you have more rules and tools needed to make it safe, if that's even possible. As you yourself have said.