Post #1971053
2026-05-04 10:42 UTC
@slomo @pid_eins I'm not concerned with ratings or general classification. I'm referring to statistics released by Microsoft and Google etc, where 70% of the issues were simply either very hard or even impossible to achieve with a safe languages like Rust.
Replies (2)
-
@nirbheek@hachyderm.io 2026-05-04 10:42
@slomo @zeenix @pid_eins general statistics are meaningless when we're talking about system level software. I think it's more useful to look at the kind of CVEs that projects like GNU coreutils get, since that is more relevant to decisions made for similar projects.
-
@slomo@toot.cat 2026-05-04 10:52
@zeenix @pid_eins And how many of those 70% of the issues were actual problems more severe than crashing the application? Sure it's great to get rid of these 70% and be able to focus on the others, but that's no excuse to ignore the remaining 30%. Filesystem handling issues like these OTOH have a good chance of leading to severe data loss or privilege escalation.