5 ms·
Of course moving to Rust (or Go) won't fix all security bugs. It will though stop ordinary random code having remote code execution or spurious data leak bugs.
by frabcus 11y ago
Of course moving to Rust (or Go) won't fix all security bugs.
It will though stop ordinary random code having remote code execution or spurious data leak bugs.
That is really significant. It needs cheering and encouraging now, and soon it needs forcing.
- pjmlp 11y agoQuite true. Memory safe languages aren't bug free in terms of security bugs, as there are also logical errors, as shown by many Java exploits. However, removing the typical C memory corruption errors out of the picture is already quite an improvement. Rust and other system programming languages have more probability to succeed outside classic UNIX systems though, as UNIX and C go hand-in-hand and I doubt that will ever change. The only non-classic UNIX is Mac OS X and it already has its own "Rust".
- yellowapple 11y agoWell, the nice thing about Rust is that it's at least theoretically possible to swap out C with Rust without affecting very many things (at least not negatively, other than the duplicate allocators IIRC), so a Rusty Unix is at least plausible.