3 ms·
Having a CERT standard seems to speak poorly of a language. I'm a little surprised Java has one.
by tormeh 12y ago
Having a CERT standard seems to speak poorly of a language. I'm a little surprised Java has one.
- pjmlp 12y agoPerl and Python are also getting one. Java luckily doesn't suffer from use after free, out of bounds, stack corruption, return oriented programming, dangling pointers. A memory safe language is still open to parameter validation, races to data access in external resources, validation of external data, incorrect use of security certificates, configuration exploits and many more. Getting rid of C style bugs is only the tip of the iceberg in security.