Those points aren't contradictory. C++ is actually so terrible that 1. They're underreporting CVEs as of today. You acknowledge that a CVE should have been fil

Those points aren't contradictory. C++ is actually so terrible that 1. They're underreporting CVEs as of today. You acknowledge that a CVE should have been filed for the FS issue but it wasn't. I say it wasn't because the community has a cavalier attitude towards security and they didn't think it was worthy of a CVE. Nothing you've said contradicts this 2. Herb Sutter argues that there should be more control over what CVEs are filed because he's not happy with the ones being filed today, which may merely be bugs and not vulnerabilities. This may make the situation worse, with even fewer CVEs being filed. That's juking the stats. Herb does acknowledge that CVEs aren't ideal, but the entire article is based on getting the number of CVEs in C++ down to a level comparable with Rust. He wouldn't have set that as a goal if he truly thought CVEs were meaningless. By the way, I'm still waiting on the link for the fix in MSVC. Or did you give up on it because you saw steveklabnik's comment where he links to an MSVC maintainer saying there's no point fixing it in MSVC without changing the spec? (https://old.reddit.com/r/cpp/comments/151cnlc/a_safety_culture_and_c_we_need_to_talk_about/js8m9sp/ https://old.reddit.com/r/cpp/comments/151cnlc/a_safety_cultu...). > something you made up entirely, as you eventually reluctantly admitted I didn't make up anything, nor did I admit anything. My information was outdated, and I said I was wrong. You're accusing me of lying when I didn't, which make it hard to interact with you. I say only this. Don't harp on a mistake I made and admitted to, and instead address the substance of what I said. 1. CVEs between languages aren't comparable (you don't dispute this). 2. C++ community should have filed CVEs for this issue but didn't (you don't dispute this). 3. The lack of CVEs indicates that they have a much lower standard for security.