4 ms·
The point is that memory issues are a smallish number of issue compared to the larger ecosystem of vulnerabilities, and choosing to port everything to Rust is l
by bbippin 3mo ago
The point is that memory issues are a smallish number of issue compared to the larger ecosystem of vulnerabilities, and choosing to port everything to Rust is like over-optimizing. Well, that’s my 2 cents.
For a language as ugly as Rust, my thought is that people should actually be using Ada, and have a mathematically provable correctness angle; not just a replacement for C/C++ with memory safety.
- khuey 3mo ago> The point is that memory issues are a smallish number of issue compared to the larger ecosystem of vulnerabilities If memory safety issues are 75% of exploited zero days it sounds to me like they're the biggest issue in the ecosystem by far.
- bbippin 3mo agoPerhaps. But what percentage of exploits are actually zero days versus, say, 10 days or 100 days? Most exploited code probably exists in the application layer in a high-level, memory safe language. I would wager that but I don’t have time to cite ten papers on HN.
- jurschreuder 3mo agoIn highly specific programs like browser sandboxes. Not in things like wordpress plugins or nodejs servers.
- jabl 3mo agoRust and Ada are about equally safe, both have advantages and disadvantages. Perhaps you're thinking about SPARK ADA, but that's a different kettle of fish. It's a bit like saying you should program in C, because formal verification tool X generates C code hence C is safe.
- bbippin 3mo agoYeah SPARK ADA is what I meant :) I think formal verification is the way to go with AI moving forward.
- afdbcreid 3mo agoRust and non-SPARK Ada are not equally safe. Ada is unsafe in the presence of data races, and also has runtime checks that slow it down, or you disable them and then it's even less safe.
- sunshowers 3mo agoRust is a beautiful language. Gorgeous.