I've been calling this out for forever now and have been repeatedly told that actually, competent devs with C are fine and the C software we use has been battle tested so it's largely secure.
And now we are seeing that was all untrue.
I've been calling this out for forever now and have been repeatedly told that actually, competent devs with C are fine and the C software we use has been battle tested so it's largely secure.
And now we are seeing that was all untrue.
now it's even more battle tested!
Let's rewrite everything - said every 15 minutes by every new developer with a new toy.
How about being constructive instead - old bug in old code is no surprise, no matter the language/technology.
This was hardly a convincing argument before the current CVE explosion. By now C needs to be dead and buried for network accessible code.
Someone needs to tell DARPA:
https://www.darpa.mil/research/programs/translating-all-c-to...
How is this constructive when you're offering nothing to construct? Just saying not to be surprised.
You really think it wasn't constructive - is that a you bias or a me bias?