3 ms·
I can speak to the “legislation” bit. The federal government is starting to take a position that “memory safety is good.” A few recommendations have come out of
by steveklabnik 3y ago
I can speak to the “legislation” bit. The federal government is starting to take a position that “memory safety is good.” A few recommendations have come out of a few security-adjacent portions of the government, and this has caused quite a stir in at least the C++ community. Right now it’s more along the lines of “prefer a memory safe language over a memory unsafe language if possible” but some fear(/ others hope?) that the recommendations will eventually grow teeth.
An example so you can see for yourself: https://www.nsa.gov/Press-Room/News-Highlights/Article/Article/3215760/nsa-releases-guidance-on-how-to-protect-against-software-memory-safety-issues/ https://www.nsa.gov/Press-Room/News-Highlights/Article/Artic...
- willseth 3y agoThanks Steve. This strikes me as a reasonable recommendation, though it seems like generally the guiding metric should be whatever leads to fewer bugs and vulnerabilities (incl. tools, processes, etc).