Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> This is a question of risk management and his argument is basically that one should always reduce the risk of memory management errors to zero.

No, that's not my argument.

> Others say that they can tolerate some risk, as long as it's in acceptable margins, since it's expensive to totally eliminate it.

These flaws are not "in acceptable margins". They were numerous and were found the instant Dmitry Vyukov turned a fuzzer on the library.

And it's not expensive to totally eliminate memory safety bugs. Just code in a memory-safe language. That's what most people already do.



I wasn't talking about a specific example or these particular flaws, but in general, because this is just an instance of your generic argument that modern C++ is unsafe, where "unsafe" means not verifiably memory-safe.

That's correct, but you are framing the problem in an unrealistic way in which Rust wins by default. In reality, this type of memory-safety guarantees will be evaluated against other concerns and those other concerns might be more important.

For you memory-safety errors are unacceptable, that much is clear. For many they are more or less acceptable and insisting that they're unacceptable won't make them change their minds.




Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: