5 ms·

Yeah man the only good things in CS are Postgres and common lisp. Everything else is a waste of time.

• nickpsecurity 11y ago
  Try crash-safe.org or Cambrige's CHERI for hardware; Qflow w/ YoSys for OSS synthesis; Microsoft's VerveOS for OS correctness; Racket for LISP; Google's F1 RDBMS for databases; Ur/Web for web apps; Cornell's JIF/SIF/SWIFT/Fabric for distributed apps; Coqasm for assembler; CompCert and CakeML for compilers/tooling. That's just a tiny selection from my collection. Lots of exciting things going on for secure and correct tools that are still powerful. Postgres and Common LISP are both weak and boring in comparison despite being good tools. :P
  • smt88 11y ago
    I don't know if I understand how most of these things could be considered secure unless they've been heavily attacked already. Are they all so much more secure by design that you consider them to be great projects? My experience is heavily with server-side web languages, so I'm particularly skeptical of those. Even the most secure-seeming web languages have buggy, insecure implementations at first.
    • kragen 11y ago
      Those projects are mostly research into how to make software and hardware less buggy; most of them are not themselves written with a threat model in mind.
      • nickpsecurity 11y ago
        Exactly. Most could be, though, if people put forth the effort. So I keep mentioning such work. Note: This comment is mainly for others reading along. Something I do on forums. I know you already understand this point.