I really should be doing my own research, but why is the consensus that #C and #CPP are too prone to subtle—particularly security-critical—errors to be acceptable for production use? I’ve been coding C since K&R was the only standard, but nearly always for research or instruction. I get the basic arguments about input validation and memory management, but seems to just be ‘humans are sloppy and error prone’, which we’ve been developing ways of dealing with since we came down from the trees ../2
