Re:This shouldn't have happened: A vulnerability postmortem
by fleventynine on Wednesday December 01, 2021 @05:44PM
(#29410142)
By complicated I guess I mean "lots of types". Static typing makes up for its cost once I can't keep all the types in my head at the same time.
Point number 2 excludes pretty much all network-connected software, and that's intentional. I suppose single-player games are ok to write in C or C++.
Re:This shouldn't have happened: A vulnerability postmortem
by lucb1e on Friday December 03, 2021 @02:53PM
(#29434471)
> 2 excludes pretty much all network-connected software
Not caring about local privilege escalation I see ;). Attack surface might be lower, but from lockscreens to terminals there is a lot of stuff out there that doesn't need to be connected to the internet itself before I find it quite relevant to consider whether it was written in a dumb language.
I assume you meant 'large' because, as software like Wordpress beautifully demonstrates, you can have the simplest program (from a user's perspective) in the fastest language but by using a billion function calls for the default page in a default installation, you can make anything slow. Using a slow language for large software, if that's what you meant to avoid then I agree.
And as another note, point number 2 basically excludes all meaningful software. Not that I necessarily disagree, but it's a bit on the heavy-handed side.