3 ms·
Writing critical utilities in memory safe languages is probably a great idea. These are already fairly hardened and extremely complex code bases where the econo
by goalieca 3y ago
Writing critical utilities in memory safe languages is probably a great idea. These are already fairly hardened and extremely complex code bases where the economics of developing a clever memory exploits is still rewarding.
For the rest of us mortals, I suggest you all harden your existing apps before rewriting everything. Broken access control, injections, and insecure design aren’t going to be saved by rust and are comparatively easy for any attacker to pull off compared to crafting a memory exploit and getting around ASLR, stack canaries, etc. If you’re stuck in c++, focus on functions that handle untrusted data, validate that data to death, and exclusively use memory safe constructs like strings and shared pointers.