4 ms·
Though I find these contests very interesting, I can only wish that as much resources was spent to develop a viable alternative to C++ that would make many of t
by gnuvince 15y ago
Though I find these contests very interesting, I can only wish that as much resources was spent to develop a viable alternative to C++ that would make many of those vulnerabilities impossible. Languages like Rust, ATS and BitC come to mind.
- veyron 15y ago> viable alternative to C++ that would make many of those vulnerabilities impossible Could you explain this a bit more? Is there a vulnerability which is specifically due to a C++ quirk?
- kibwen 15y agognuvince may be referring to C++'s lack of automatic bounds checking, which can contribute to exploits via buffer overflows. (But I am neither a security researcher nor a particularly competent C++ programmer, so I may just be completely off-base!)
- gcp 15y agoMany of these exploits use buffer overflows, use-after-free, etc. They're specific to manual memory management.
- luriel 15y agoGoogle is developing Go ( http://golang.org http://golang.org ) and the first 'stable' release (aka "Go 1") should be out any day now. Of course from having a new language to building a whole web browser with it will take some time.
- ootachi 15y agoGo is not suitable for developing a performant web browser engine. The GC alone ensures that.