4 ms·

Your comment seems to ignore all the evidence that shows approx, 70% of security related issues come from those memory unsafe languages. Two independent large c

Your comment seems to ignore all the evidence that shows approx, 70% of security related issues come from those memory unsafe languages. Two independent large companies found that same statistic on two entirely different and large code bases. Google and Microsoft. You can ignore those findings as you like, but that is why so many people are interested in Rust.

pjmlp 4y ago
Yet, those same companies are doubling down in C++ for many of their new projects. Chrome isn't going to adopt any Rust, and Firefox is a few percentilies away to matter at all. Android now has Rust, yet it isn't exposed to app developers, NDK is all about C and C++, as is the newly introduced AGK for game developers. AMD/Intel/NVidia now employ many of the ISO C++ contributors and are pushing on using standard C++ as the lingua franca of GPGPU computing. Azure Sphere, being sold as top security IoT device, has C SDK. The new WinUI / WinAppSDK are mostly coded in C++, with bindings for other languages. Apple just released C++ bindings for Metal, as alternative to the existing Swift ones. So, yeah their business units don't seem to be very keen in following the security advices anyway.
- bluejekyll 4y ago
  All of those are existing software products, the sunk cost into those is so high that overcoming is monumental. Firefox continues its journey. The better question is what should they do with new software. The analogy I see is an industry similar to the auto industry as it decides what to do with their ICE based platforms as consumers are going after all electric.
  - pjmlp 4y ago
    Not really, AGK, Azure Sphere or WinUI/UWP are post the famous security reports. Regular consumers are going electric when they become cheaper and usable as ICE vehicles, until then they are fine for rich people with garage.

4 ms·

Your comment seems to ignore all the evidence that shows approx, 70% of security related issues come from those memory unsafe languages. Two independent large c

by bluejekyll 4y ago

pjmlp 4y ago
Yet, those same companies are doubling down in C++ for many of their new projects. Chrome isn't going to adopt any Rust, and Firefox is a few percentilies away to matter at all. Android now has Rust, yet it isn't exposed to app developers, NDK is all about C and C++, as is the newly introduced AGK for game developers. AMD/Intel/NVidia now employ many of the ISO C++ contributors and are pushing on using standard C++ as the lingua franca of GPGPU computing. Azure Sphere, being sold as top security IoT device, has C SDK. The new WinUI / WinAppSDK are mostly coded in C++, with bindings for other languages. Apple just released C++ bindings for Metal, as alternative to the existing Swift ones. So, yeah their business units don't seem to be very keen in following the security advices anyway.
- bluejekyll 4y ago
  All of those are existing software products, the sunk cost into those is so high that overcoming is monumental. Firefox continues its journey. The better question is what should they do with new software. The analogy I see is an industry similar to the auto industry as it decides what to do with their ICE based platforms as consumers are going after all electric.
  - pjmlp 4y ago
    Not really, AGK, Azure Sphere or WinUI/UWP are post the famous security reports. Regular consumers are going electric when they become cheaper and usable as ICE vehicles, until then they are fine for rich people with garage.