Open Menu
AllLocalCommunitiesAbout
lotide
AllLocalCommunitiesAbout
Login

The NSA advises move to memory-safe languages

⁨78⁩ ⁨likes⁩

Submitted ⁨⁨11⁩ ⁨months⁩ ago⁩ by ⁨mac@programming.dev⁩ to ⁨programming@programming.dev⁩

https://www.nsa.gov/Press-Room/Press-Releases-Statements/Press-Release-View/Article/3608324/us-and-international-partners-issue-recommendations-to-secure-software-products/

source

Comments

Sort:hotnewtop
  • cerement@slrpnk.net ⁨11⁩ ⁨months⁩ ago

    C#, Go, Java, Python, Rust, and Swift

    source
    • pkill@programming.dev ⁨11⁩ ⁨months⁩ ago

      so basically anything without manual memory management. I don’t really see a good reason to shill particular names aside from discussions on performance impact of GC vs VM vs ownership

      source
      • calcopiritus@lemmy.world ⁨11⁩ ⁨months⁩ ago

        Not really manual memory management. I’d say C++'s memory management is automatic, just not safe.

        Yes, a lot of programming languages are memory safe, maybe it would be faster to list memory unsafe popular languages.

        source
      • BatmanAoD@programming.dev ⁨10⁩ ⁨months⁩ ago

        Sorry, are you saying the NSA’s information sheet shouldn’t have mentioned specific languages? Why not?

        source
  • Aurenkin@sh.itjust.works ⁨11⁩ ⁨months⁩ ago

    If you aren’t getting seg faults, are you really living?

    source
  • onlinepersona@programming.dev ⁨10⁩ ⁨months⁩ ago

    Stop using C/C++

    Spread the word far and wide.

    source
    • bruhduh@lemmy.world ⁨10⁩ ⁨months⁩ ago

      Obscure hardware still gotta be supported somehow

      source
      • onlinepersona@programming.dev ⁨10⁩ ⁨months⁩ ago

        What are you implying here?

        source
        • -> View More Comments
  • oscardejarjayes@hexbear.net ⁨10⁩ ⁨months⁩ ago

    The NSA said this? Looks like it’s just going to be assembly for me from here on out. /s, ofc

    source
    • Helmic@hexbear.net ⁨10⁩ ⁨months⁩ ago

      fedjacketing rust devs on the funny shaped ursine website

      source
  • biscuitswalrus@aussie.zone ⁨10⁩ ⁨months⁩ ago

    Yes, they’ve been saying it for a year, at this point they’re repeating themselves: www.malwarebytes.com/blog/news/2022/11/…/amp

    source
  • Aboel3z@programming.dev ⁨10⁩ ⁨months⁩ ago

    I find it amazing that so many are clinging on to C++. It must be that sense of accomplishment when you finally succeed, having solved a bunch of problems on the way. C++ has had so many chances now. Many new standards coming out over the last decade. But the language is hardly simpler, just more to learn. See CoreCppGuidelines. This is what the 2 most prominent people of C++ want developers to learn in order to practice “safe” C++. This doesn’t scale. A language needs to be built from the ground up for developers. Rust has taken a whole new concept and tried to solve memory issues directly with the compiler. Other languages are solving other kinds of issues (for differing kinds of use cases). A language should not put such a burden on the developer.

    source