4 ms·
Old codebases have a lot of baked-in institutional knowledge and bug fixes. A RiiR effort will introduce new bugs and reintroduce old ones, especially if done "
by ridiculous_fish 5y ago
Old codebases have a lot of baked-in institutional knowledge and bug fixes. A RiiR effort will introduce new bugs and reintroduce old ones, especially if done "without the full context, hastily, and by people who did not write the original code." Rewrites often fail.
MSFT, Google, Apple, Facebook all have a gazillion lines of C++ and it's not going away any time soon. "Don't use C++" is not practical advice for them and many other companies.
- pjmlp 5y agoMicrosoft Security Response Center official guidelines are: 1 - Use a managed language like C#, Java, Go if automatic memory management is ok 2 - Use a systems language like Rust if automatic memory management is not an option 3- Use C++ alongside Core Guidelines tooling. Granted, not all Microsoft projects care about those guidelines.