There's 40 years history of trying, and it doesn't work. These decent C programmers are like True Scotsmen. When top software companies keep getting pwned, eve

There's 40 years history of trying, and it doesn't work. These decent C programmers are like True Scotsmen. When top software companies keep getting pwned, even in their most security-sensitive projects, it's because they hire crap programmers. Even basic boring C can be exploitable. Android was hit by an integer overflow in `malloc(items * size)` (stagefright). Mozilla's NSS had vulnerability due to a wrong buffer size, which fuzzing did not catch (BigSig).