9 ms·
no, it's not. it's a tool in a zero sum game. a competitive imbalance. an exclusive moat. it's not improving anything, it's shifting power.
by raffael_de 5mo ago
no, it's not. it's a tool in a zero sum game. a competitive imbalance. an exclusive moat. it's not improving anything, it's shifting power.
- warkdarrior 5mo agoAs long as it shifts the zero-sum game in the favor of the defender, it is improving things.
- Salgat 5mo agoI disagree. Assuming code complexity is roughly fixed, more sophisticated code analysis will result in a smaller surface area for bugs. Bugs will still be found, but there will be less bugs to be found and less opportunities to exploit.
- wslh 5mo agoI'd expect the bigger shift to be toward secure-by-construction building blocks: less custom code that needs to be audited from scratch, and more hardened or verified components where common bug classes are already designed out.
- Salgat 5mo agoA similar concept is used in Rust, where code that needs unsafe sections is generally done in very isolated and very heavily scrutinized modules.