3 ms·
Memory-safe languages do not guarantee absence of bugs or security issues. I remember when Heartbleed was discovered, and people were groaning how that would ne
by krylon 5y ago
Memory-safe languages do not guarantee absence of bugs or security issues. I remember when Heartbleed was discovered, and people were groaning how that would never have happened had OpenSSL been written in Rust, one of the OpenBSD developers wrote a blog post to explain how Rust's memory safety guarantees would not have prevented Heartbleed or a comparable bug.
It would no doubt eliminate a lot of bugs, but security researchers and black hats would almost certainly continue to find exploitable bugs. It would just get somewhat harder. But AFAIU, finding exploitable bugs at the OS-level has been getting progressively harder for a long time, to the point that these days the main attack surface are web browsers and users who unquestioningly open file attachments in email.
And people who eagerly add new features to operating systems will no doubt provide a generous supply of security problems to discover and "fix in the next release". ;-)