Update: after some feedback from a trusted advisor I have rephrased this conversation snippet: https://xeiaso.net/blog/%F0%9F%A5%BA#:~:text=A%20prior%20version%

Update: after some feedback from a trusted advisor I have rephrased this conversation snippet: https://xeiaso.net/blog/%F0%9F%A5%BA#:~:text=A%20prior%20version%20of%20this%20conversation%20snippet%20was%20badly%20phrased.%20You%20are%20reading%20an%20edited%20version%20in%20case%20this%20is%20relevant%20in%20internet%20comment%20arguments https://xeiaso.net/blog/%F0%9F%A5%BA#:~:text=A%20prior%20ver.... Here is the new version (same links): > <Cadey> I don't know about the code quality standards of the sudo project, but overall I don't see them doing any concerted effort to try to migrate away from C and there are frequent security vulnerabilities that result in attackers getting root access anyways. I really wish the industry as a whole would take languages like Rust a bit more seriously and start actually moving towards programs being safer to use because security vulnerabilities in core infrastructure result in emergency patches. It was disappointing to see an attempt at using Rust in an important Python library torpedoed by users of obscure architectures not supporting Rust. Maybe the solution there is to use WebAssembly as a compile target instead of making everything be native code. I wouldn't wish hppa's reverse stack growth on anyone trying to write a compiler though.