3 ms·
Yes, and even after introducing and using Rust, there were still vulns in the remaining code. FWIW, Rust is my main language, so I am grateful to the humans th
by Ar-Curunir 11d ago
Yes, and even after introducing and using Rust, there were still vulns in the remaining code.
FWIW, Rust is my main language, so I am grateful to the humans that created it, and it is indeed a monumental effort. But vuln finding is a different kind of creative endeavour, and one that is heavily weighted against defenders.
- spartanatreyu 11d agoYes, which is why you don't stop at rust. You would choose rust (from a security standpoint) because it massively reduces memory safety issues (which from a Microsoft study was responsible for around 70% of bugs). Then you look at things like linting, fuzzing, design by contract, proofing, deterministic test runs, etc... As I said above: use better tools and processes. LLMs don't fit that criteria.