Comment by Ar-Curunir
4 years ago
You seem to have missed the point of the article completely.
We can’t achieve perfect security (there’s no such thing). What we can achieve is raising the bar for attackers. Simple things like using memory-safe languages for handling untrusted inputs, least-privilege design, defense in depth, etc.
Memory-safe languages are good, but decreasing the attack surface through compartmentalization is much more reliable I think.