Re:Criticizing Hare language approach for generic data struc...
by BaculumMeumEst on Wednesday May 04, 2022 @12:28PM
(#31262661)
> Like? FEDRAMP?
No, STIGs.
> The vast majority of compliance is about threat modeling and access controls.
If compliance doesn't address security, that sounds like a bigger issue than a new hobby language existing.
Re:Criticizing Hare language approach for generic data struc...
by staticassertion on Wednesday May 04, 2022 @04:47PM
(#31265652)
The issue is that no one is taking responsibility for writing safe software. Compliance / regulation isn't, developers aren't either.
> I've worked in defense and there are stringent security requirements for applications and servers.
Like? FEDRAMP? The vast majority of compliance is about threat modeling and access controls.