5 ms·

Can we please stop writing code in languages that allow buffer overflows? Please?!

• chris_wot 4y ago
  Sure, let's go rewrite millions and millions of lines of functioning code. Want to volunteer?
  • Gigachad 4y ago
    Yes, at this point I'd probably only start taking jobs in secure languages. Working on Rust web services has been a joy and I don't know if I could stand going back to insecure languages and finding critical issues out in the wild like this.
    • rrdharan 4y ago
      Just because you happened to write and deploy your app in Rust doesn’t protect you from critical issues in the wild: https://internals.rust-lang.org/t/spectre-mitigations-in-rust/13353 https://internals.rust-lang.org/t/spectre-mitigations-in-rus...
      • Gigachad 4y ago
        My seat belt also doesn't stop me dying in a car crash but I still put it on and disregard anyone telling me I shouldn't bother because its not perfect.
        • rrdharan 4y ago
          Sure, but that's not what I (or the sibling commenter) was saying. I'm a proponent of using more secure languages, my point is just that if you think it will mean a world in which you won't be "finding critical issues out in the wild like this", you're wrong. There will always be 0days; attackers will always find a way.
    • TillE 4y ago
      There is no such thing as a "secure language", it's very dangerous to think like that. You can have exploits like SQL injection, for example, in any language.
      • Koshkin 4y ago
        True, but SQL and “any language” are two different languages.
  • pyrolistical 4y ago
    If paid at average sounds like a dream 9-5 job
• astrange 4y ago
  A JIT is its own “language” and would still have issues if you wrote it in Rust.
• Koshkin 4y ago
  But for whatever reason “safe” languages need the keyword “unsafe”…