undefined | Better HN

0 pointspjmlp2d ago0 comments

Explain to us why you are not allowed to use 100% of ISO C, without certification processes that castrate C to the point it feels like Ada 83 with curly brackets.

Proceses that outside high integrity computing no one is willing to make themselves go through without legal requirements and liability.

Most of it because during 1980's it was cheaper to advocate for C plus certification than pay for Ada compilers and developers.

0 comments

Nokinside2d ago

Because we want to write correct code. We want to verify the absence of many types of errors where amateurish language war stuff like Rust vs C does not even scratch the surface.

I would propose that we change your original statement "Ideally neither C nor C++ should be used when security matters." into:

"Ideally people who don't care about secrurity should not write code when security matters."

Can we agree that this is better than talking about programming languages?

pjmlpOP2d ago

Except security matters everywhere in modern computing, and the world is full of amateurs that call themselves engineers, writing C without any of those tools, or legal consequences.

Veserv2d ago

If it mattered they would not be using C without any of those tools or techniques. Therefore, it is empirically proven that it either does not matter or they are deploying code unfit for purpose and should not be writing such code.

And that is precisely what they said:

> Ideally people who don't care about secrurity [sic] should not write code when security matters.

The absence of legal consequences further supports the fact that it does not matter.

ethical2d ago

There are always legal consequences, take a butchers...

https://www.google.com/search?q=any+case+law+to+defeat+this+...

pjmlpOP2d ago

It does certainly matter, it needed to go beyond what is acceptable for governments and security agencies to finally start reacting, since Morris worm came to be.

Naturally the move fast and break things culture sees it otherwise.

j / k navigate · click thread line to collapse

0 comments

Nokinside2d ago

Because we want to write correct code. We want to verify the absence of many types of errors where amateurish language war stuff like Rust vs C does not even scratch the surface.

I would propose that we change your original statement "Ideally neither C nor C++ should be used when security matters." into:

"Ideally people who don't care about secrurity should not write code when security matters."

Can we agree that this is better than talking about programming languages?

pjmlpOP2d ago

Except security matters everywhere in modern computing, and the world is full of amateurs that call themselves engineers, writing C without any of those tools, or legal consequences.

Veserv2d ago

And that is precisely what they said:

> Ideally people who don't care about secrurity [sic] should not write code when security matters.

The absence of legal consequences further supports the fact that it does not matter.

ethical2d ago

There are always legal consequences, take a butchers...

https://www.google.com/search?q=any+case+law+to+defeat+this+...

pjmlpOP2d ago

It does certainly matter, it needed to go beyond what is acceptable for governments and security agencies to finally start reacting, since Morris worm came to be.

Naturally the move fast and break things culture sees it otherwise.

j / k navigate · click thread line to collapse