Comment by inigyou
2 days ago
Overall safety matters. Memory safety is just one factor. Log4Shell happened in Java, a GC language without pointer arithmetic.
2 days ago
Overall safety matters. Memory safety is just one factor. Log4Shell happened in Java, a GC language without pointer arithmetic.
With Fil-C and Rust the memory safety shouldn't even be discussed. It should be the bare minimum.
Presence of worse bugs won't make memory bugs disappear.
Using seat belts is just one factor. People still die while wearing one, so it should not be compulsory.
Is how this kind of arguments always get received by security folks.