I really should be doing my own research, but why is the consensus that #C and #CPP are too prone to subtle—particularly security-critical—errors to be acceptable for production use? I’ve been coding C since K&R was the only standard, but nearly always for research or instruction. I get the basic arguments about input validation and memory management, but seems to just be ‘humans are sloppy and error prone’, which we’ve been developing ways of dealing with since we came down from the trees ../2
../2 I’m not necessarily denying the thesis—I’m dutifully learning #rust right now—but is anyone aware of good non-anecdotal evidence for why we should be avoiding C/C++? (For vales of ‘evidence’ including large-scale data-driven studies, metastudies, peer-review, replication, …).
Add comment