3 ms·

Trump administration also rescinded this I believe.

• steveklabnik 1y ago
  Not particularly. Some of this stuff started under the last Trump administration as well. We'll see.
  • nailer 1y ago
    It's all sides of government. Edit: all links now fixed. ____ (generated, but with references) # U.S. government guidance on memory-safe languages Here's the list of links to U.S. government documents recommending memory-safe programming languages for cybersecurity. 1. *White House ONCD - "Back to the Building Blocks" (Feb 2024)* - Encourages developers to use memory-safe languages like Rust, Python, Java, C#, Go, Swift to reduce vulnerabilities. - Link: https://bidenwhitehouse.archives.gov/wp-content/uploads/2024/02/Final-ONCD-Technical-Report.pdf https://bidenwhitehouse.archives.gov/wp-content/uploads/2024... 2. *CISA, NSA, FBI, and partners - "Memory Safe Roadmaps" (Dec 2023)* - Recommends memory-safe languages (C#, Go, Java, Rust, Ruby, Swift) and roadmaps to eliminate memory issues. - Link: https://www.cisa.gov/resources-tools/resources/case-memory-safe-roadmaps https://www.cisa.gov/resources-tools/resources/case-memory-s... 3. *NSA - "Software Memory Safety" (Nov 2022)* - Advises using memory-safe languages like C#, Go, Java, Ruby, Swift to avoid C/C++ vulnerabilities. - Link: https://media.defense.gov/2022/Nov/10/2003112742/-1/-1/0/CSI_SOFTWARE_MEMORY_SAFETY.PDF https://media.defense.gov/2022/Nov/10/2003112742/-1/-1/0/CSI... 4. *CISA - "Urgent Need for Memory Safety" (Sep 2023, updated Dec 2023)* - Promotes memory-safe languages as part of the Secure by Design campaign. - Link: https://www.cisa.gov/news-events/news/urgent-need-memory-safety-software-products https://www.cisa.gov/news-events/news/urgent-need-memory-saf... 5. *White House press release - "Future Software Should Be Memory Safe" (Feb 2024)* - Calls for memory-safe languages to reduce cyberattack surfaces. - Link: https://bidenwhitehouse.archives.gov/oncd/briefing-room/2024/02/26/press-release-technical-report/ https://bidenwhitehouse.archives.gov/oncd/briefing-room/2024... 6. *NIST - "Safer Languages" (updated Oct 2022)* - Highlights memory-safe languages like Rust and Ada to prevent common vulnerabilities. - Link: https://www.nist.gov/itl/ssd/software-quality-group/safer-languages https://www.nist.gov/itl/ssd/software-quality-group/safer-la...
    • steveklabnik 1y ago
      What your parent is referring to is that three of those links now 404. Some of that is simply because whitehouse.gov gets redone with new administrations, and so old stuff is thrown out. They're also referring to how the Trump admin is talking about seriously reducing CISA's budget. Things like that.
      • nailer 1y ago
        All the links are now fixed and return OK now. I don't think Whitehouse data archival is what the parent was referring to.
        • steveklabnik 1y ago
          There were a lot of people online misinterpreting it, it’s possible they saw one of those threads.
          • Klonoar 1y ago
            I was one of those people indeed, and I appreciate your clarifications in this thread.