Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

"Software quality", in my mind, includes "nobody can send me a crafted text message that gives them remote root access on my phone."

Yes, there are security issues beyond memory safety bugs. But these are the issues that are most regularly turned into the most serious exploits and they are hellishly common.

All systems security is about layered defenses. "Oh, log4j exists" is not a compelling reason to avoid changes that can mitigate very large portions of security risk.

There are places where you'll truly never encounter untrusted input and a crash is just as bad as blasting off and performing whatever unexpected computation, but that's nowhere near the entire existing C++ landscape.



Design by contract improves software quality instead of lowering it.

And it explicitly introduces undefined behaviour aka "memory safety bugs".


Design by contract? That technique which “shuts down your program”/panics on assertion failure? You seem to contradict yourself.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: