← Back to context

Comment by lelanthran

1 hour ago

> I wonder why C and C++ are usually regarded as equally insecure.

They aren't, usually.

C++ has all the C problems, and multiples more on top of those. It's a broad attack surface - literally no one is going to claim to be proficient in every single C++ feature available to their compiler. It's also quite opaque to visual inspection (making double-checking with an LLM difficult as it needs whole-program reasoning instead of localised reasoning).

One of those languages is one of the most complex programming languages ever invented, with the largest breadth of features, any of which may interact with any other feature in subtle ways.

The other is one of the most minimalistic languages created, with a dev able to keep the language standard in their head for the most part.