SoylentNews
SoylentNews is people
https://soylentnews.org/

upstart writes:

Memory safe programming languages are on the rise. Here's how developers should respond:

Developers across government and industry should commit to using memory safe languages for new products and tools, and identify the most critical libraries and packages to shift to memory safe languages, according to a study from Consumer Reports.

The US nonprofit, which is known for testing consumer products, asked what steps can be taken to help usher in "memory safe" languages, like Rust, over options such as C and C++. Consumer Reports said it wanted to address "industry-wide threats that cannot be solved through user behavior or even consumer choice" and it identified "memory unsafety" as one such issue.

The report, Future of Memory Safety, looks at range of issues, including challenges in building memory safe language adoption within universities, levels of distrust for memory safe languages, introducing memory safe languages to code bases written in other languages, and also incentives and public accountability.

During the past two years, more and more projects have started gradually adopting Rust for codebases written in C and C++ to make code more memory safe. Among them are initiatives from Meta, Google's Android Open Source Project, the C++-dominated Chromium project (sort of), and the Linux kernel.

In 2019, Microsoft revealed that 70% of security bugs it had fixed during the past 12 years were memory safety issues. The figure was high because Windows was written mostly in C and C++. Since then, the National Security Agency (NSA) has recommended developers make a strategic shift away from C++ in favor C#, Java, Ruby, Rust, and Swift.

The shift towards memory safe languages -- most notably, but not only, to Rust -- has even prompted the creator of C++, Bjarne Stroustrup and his peers, to devise a plan for the "Safety of C++". Developers like C++ for its performance and it still dominates embedded systems. C++ is still way more widely used than Rust, but both are popular languages for systems programming.

[...] The report highlights that computer science professors have a "golden opportunity here to explain the dangers" and could, for example, increase the weight of memory safety mistakes in assessing grades. But it adds that teaching parts of some courses in Rust could add "inessential complexity" and that there's a perception Rust is harder to learn, while C seems a safe bet for employability in future for many students.

[...] To overcome programmers' belief that memory safe languages are more difficult, someone could explain that these languages "force programmers to think through important concepts that ultimately improve the safety and performance of their code," the report notes.

Are you or your employer using or considering memory safe languages, and if so what is your opinion of them in your particular sphere?

Original Submission

1. "upstart" - https://soylentnews.org/~upstart/
2. "Memory safe programming languages are on the rise. Here's how developers should respond" - https://www.zdnet.com/article/memory-safe-programming-languages-are-on-the-rise-heres-how-developers-should-respond/
3. "report" - https://advocacy.consumerreports.org/research/report-future-of-memory-safety/
4. "Meta" - https://www.zdnet.com/article/the-rust-programming-language-just-got-a-big-boost-from-meta/
5. "Android Open Source Project" - https://www.zdnet.com/article/google-after-using-rust-we-slashed-android-memory-safety-vulnerabilities/
6. "Chromium project (sort of)" - https://www.zdnet.com/article/programming-languages-rust-is-coming-to-chromium-and-heres-why/
7. "the Linux kernel" - https://www.zdnet.com/article/linus-torvalds-rust-will-go-into-linux-6-1/
8. "70% of security bugs it had fixed during the past 12 years were memory safety issues" - https://www.zdnet.com/article/microsoft-70-percent-of-all-security-bugs-are-memory-safety-issues/
9. "make a strategic shift away from C++" - https://www.zdnet.com/article/c-creator-upbeat-on-its-future-5000142451/
10. "to devise a plan for the "Safety of C++"" - https://www.zdnet.com/article/c-programming-language-and-safety-heres-where-it-goes-next/
11. "Original Submission" - https://soylentnews.org/submit.pl?op=viewsub&subid=58346

printed from SoylentNews, Memory Safe Programming Languages are on the Rise on 2024-04-25 01:51:13