upvote

points

by FartyMcFarter23 hours ago |
comments
upvoteby lambdaone23 hours ago|
[-]
The U.S. government could have required all new software for any government-procured system to be written memory-safe languages, thus making it ubiquitous. This could have been phased in slowly with a few years of on-ramp time to allow for industry to acquire the relevant skills.
reply
upvoteby elcritch23 hours ago|
parent|
next
[-]
The DoD tried that with Ada and largely failed. That was with defense contractors whose primary customer mandated it. That was despite Ada being proven to work in its first projects.
reply
upvoteby bluGill23 hours ago|
parent|
prev|
next
[-]
The U.S. government had pushed Ada for years and it never worked out. The government was forced to accept C++ because industry was rebelling against ADA, even though ADA was memory safe. Well, Ada did have the ability to be memory unsafe. It was much better by default.
reply
upvoteby terminalcommand23 hours ago|
parent|
prev|
next
[-]
But even in memory-safe languages, compiler bugs are still an issue. The theory is perfect but the implementation is flawed. In such case once the compiler bugs are found, the software would have to be rewritten to compile. For example an 11 year old memory bug was discovered recently in the rust compiler: https://www.penligent.ai/hackinglabs/rust-borrow-checker-bug....

Memory safe languages are not a silver bullet either.

reply
upvoteby GTP22 hours ago|
parent|
next
[-]
Definitely not a silver bullet (consider also that memory management isn'the only source for vulns), but still much better than C/C++.
reply
upvoteby dns_snek17 hours ago|
parent|
prev|
[-]
I think we'll have flying cars before we have to start focusing on compiler bugs. Most software is already written in memory safe languages and their vulnerabilities are unrelated to memory safety, they're just plain old logic bugs.
reply
upvoteby terminalcommand15 hours ago|
parent|
[-]
No, you are wrong. Rust compiler bug uncovered this month was aboıt memory safety: https://www.penligent.ai/hackinglabs/rust-borrow-checker-bug....

Basically, the borrow checker allowed writing memory unsafe programs without using the keyword unsafe.

Compilers for C, C++ etc. are well established but Rust is a relatively new language. There are many bugs to come just like this.

Using a memory safe language is not a silver bullet for writing memory safe code. The implementation of the memory safe language introduces bugs as well.

reply
upvoteby dns_snek13 hours ago|
parent|
[-]
You misunderstood, I'm not saying that compiler bugs don't exist or that they're unrelated to memory safety.

I'm saying that these compiler bugs are extremely low on our list of priorities. If we want to eliminate all vulnerabilities in all of software we have about a century worth of logic bugs that are likely more critical and easily exploitable than compiler bugs.

reply
upvoteby elzbardico22 hours ago|
parent|
prev|
[-]
The DoD have even created their own language: ADA. Massive contracts power, but different markets to incentivize.

The distance between the usual consumer/b2b tech startup and the kind of company that sells software to the air force is even bigger than the distance between Google and the kind of company who hires Accenture.

reply