Re:VP of InfoSec at InVision on secure code development [audio]
by tptacek on Friday March 22, 2019 @01:25PM
(#19464738)
No. Rust eliminates C/C++ memory corruption vulnerabilities, but so do all the other mainstream high-level languages.
What Rust enables you to do is ship software that formerly would have demanded C/C++ (kernels, drivers, embedded software, browsers, games) without having to use C/C++. That's a security win, but not a game changer for secure software development in general, the vast majority of which is done in non-C/C++ languages already.
What Rust enables you to do is ship software that formerly would have demanded C/C++ (kernels, drivers, embedded software, browsers, games) without having to use C/C++. That's a security win, but not a game changer for secure software development in general, the vast majority of which is done in non-C/C++ languages already.