6 ms·
It's better than nothing and likely better than something without source. Using the CLR which has no guaranteed memory zeroing and has immutable strings and GC
by wumbernang 11y ago
It's better than nothing and likely better than something without source.
Using the CLR which has no guaranteed memory zeroing and has immutable strings and GC and an exposed profiler and debugging APi is a larger concern IMHO.
- acchow 11y ago> It's better than nothing There are real issues with a false sense of security that you're glossing over here...
- Guillaume86 11y agoI didn't check but I assume they use SecureString.
- wumbernang 11y agoI'd be surprised if they did and don't forget that it's serialized/deserialized from something which will be hanging around in the GC in the form of a memory backed stream or something too.
- alkonaut 11y ago> the CLR which has no guaranteed memory zeroing That's interesting. Can you elaborate? > and has immutable strings and GC Immutable strings is a pretty standard feature for a language, right?
- wumbernang 11y agoBasically, when an object goes out of scope, it isn't de-allocated instantly. Immutable strings aren't standard; they're an implementation choice.