4 ms·
It is 100-1000 times harder to find application-level security bugs than it is to find memory safety bugs. It is also far easier to apply formal analysis to co
by jnwatson 2y ago
It is 100-1000 times harder to find application-level security bugs than it is to find memory safety bugs.
It is also far easier to apply formal analysis to code if you don't have to model arbitrary pointers.
Android has hard evidence that just eliminating memory safety makes a significant difference.