4 ms·
I agree about C and C++, but is there a language that exists today that you think would be better for writing security-conscious code? Should a language be inve
by yafujifide 12y ago
I agree about C and C++, but is there a language that exists today that you think would be better for writing security-conscious code? Should a language be invented that is specifically for writing security-conscious code?
- higherpurpose 12y agoRust, for the former, Cryptol for the latter (just one caveat: written by the NSA/influenced people).
- imanaccount247 12y agoCryptol was written by Galois not the NSA. It was written for the NSA.
- yafujifide 12y agoHey, thanks a lot for recommending rust. Since your comment, I've investigated it, and it's exactly what I'm looking for!
- imanaccount247 12y agoC is a great replacement for C. No, I don't mean that as a joke. Using C as a low level language and proving it correct via a higher level language gives you the performance of C without the security problems: http://sel4.systems/ http://sel4.systems/
- adrianN 12y agoAda is a language that is specifically for writing secure code.
- kedean 12y agoCorrection, Ada is a language specifically for writing correct code. Correct is only a subset of secure.
- mike_hearn 12y agoBasically all modern languages with strict type systems do better than C or C++ when it comes to security. Anything JVM based can't be buffer overflowed or double-free/use-after-free exploited, for instance. Now if you go with a weakly typed language like Javascript there are a whole other class of bugs that can bite you: https://medium.com/@octskyward/type-safety-and-rngs-40e3ec71ab3a https://medium.com/@octskyward/type-safety-and-rngs-40e3ec71... ... so don't use those.