• LeFantome@programming.dev
    link
    fedilink
    arrow-up
    6
    ·
    edit-2
    5 days ago

    The industry cannot code safely. There are many reports, studies, and corporate disclosures highlighting that memory related bugs are the primary source of critical security issues in C and C++ code. That is why even NIH companies like Google and Microsoft are adopting Rust in their core products.

    That you want to publicly ignore all that evidence to paint it as an individual skill issue does not come across as competent or intelligent. Few of us are going to assume your code is free of these kinds of bugs.

    The fact that your have to say it so dismissively makes me think that you know it too.

    • Shanmugha@lemmy.world
      link
      fedilink
      arrow-up
      1
      arrow-down
      3
      ·
      5 days ago

      Things are much simpler:

      1. Want a bug free code - do bug free code. Spend time carefully evaluating every line and interaction

      2. Want third-party code and safety - examine that code in the same way

      3. Whatever you do, assume there is a bug in any software you use, so plan and organize accordingly

      4. No amount of magic pills can substitute the above. So yeah, it is a skill issue. Also an issue of kids wining that there are bugs and they don’t feel safe, so they want to cling to magic pills instead of dealing with the reality

      • DeltaWingDragon@sh.itjust.works
        link
        fedilink
        arrow-up
        1
        ·
        2 hours ago

        It’s not a “magic pill”, it’s another tool. We’re not saying that it will magically fix everything, it will just make certain types of errors less probable.

        If you want bug-free code, will you (A) use a tool that makes it easier, or (B) use the same tool as before?

        “Skill issue” is not an answer.

        • Shanmugha@lemmy.world
          link
          fedilink
          arrow-up
          1
          ·
          1 hour ago

          Wrong reasoning, friend:

          Maybe C++ has rotted their brain to the point they can’t “get” the borrow checker.

          Yeah, sure. Borrow checker fixes all. This is exactly the idiot attitude I am addressing.

          And if I want a bug-free code, I will use same tool as ever: my brain

          • DeltaWingDragon@sh.itjust.works
            link
            fedilink
            arrow-up
            1
            ·
            1 hour ago

            I am not the person who said “C++ has rotted their brain”. I have not expressed a similar sentiment. I have never said that “borrow checker fixes all”, in fact I said that it will not magically fix everything.

            And if I want a bug-free code, I will use same tool as ever: my brain

            Is your brain infallible?

            The strategy is not to 100% eliminate every bug in existence or theory, bugs are inevitable. The strategy is Swiss cheese security.

            Something is better than nothing. Therefore (brain + something) > (brain + nothing). As long as “something” works to prevent bugs, to any extent, it will result in fewer bugs.