2 ms·
Not to mention most CVEs I see are C/C++ related. That’s not the sign of something we should keep building software in.
by fnordpiglet 4y ago
Not to mention most CVEs I see are C/C++ related. That’s not the sign of something we should keep building software in.
- Deukhoofd 4y agoHow much of that is due to the sheer volume of business critical software written in C/C++?
- fnordpiglet 4y agoSurely you jest. Do you think most web services are written in C? Most enterprise software has been written in Java for a very long time. When you see exploits in other languages it’s often exploits due to the fact they were written in C/C++. Buffer overruns are no an artifact of the prevalence of C/C++, but that of the stack that you operate the C/C++ surface area is the weakest.