World News

32586 readers

568 users here now

News from around the world!

Rules:

Please only post links to actual news sources, no tabloid sites, etc
No NSFW content
No hate speech, bigotry, propaganda, etc

founded 5 years ago

MODERATORS

[email protected]

181

White House urges developers to dump C and C++ (www.infoworld.com)

submitted 10 months ago by [email protected] to c/[email protected]

54 comments fedilink hide all child comments

Biden administration calls for developers to embrace memory-safe programing languages and move away from those that cause buffer overflows and other memory access vulnerabilities.

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 8 points 10 months ago (4 children)

Why? What's wrong with safe, managed and fast languages?

[–] zik 14 points 10 months ago* (last edited 10 months ago) (1 children)

Java's runtime has had a large number of CVEs in the last few years, so that's probably a decent reason to be concerned.

[–] [email protected] 3 points 10 months ago

Yep but:

it's one runtime, so patching a CVE patches it for all programs (vs patching each and every program individually)
graalvm is taking care of enabling java to run on java

[–] DampCanary 7 points 10 months ago

Nothing...

Only that descrition doesn't include Java

[–] [email protected] 3 points 10 months ago (1 children)

Nothing really, the JVM has a pretty troubled history that would really make me hesitate to call it "safe". It was originally built before anyone gave much thought to security and that fact plauges it to the present day.

[–] [email protected] 2 points 10 months ago

and how much of this troubled history is linked to Java Applets/native browsers extensions, and how much of it is relevant today?

[–] [email protected] 1 points 10 months ago (1 children)

Written in C++

[–] FooBarrington 3 points 10 months ago

There's a difference between writing code on a well-tested and broadly used platform implemented in C++ vs. writing new C++.