Conversation

Notices

1. Embed this notice
   Emi Yusa (gnuxeava@fedi.absturztau.be)'s status on Tuesday, 05-Nov-2024 23:56:59 JST Emi Yusa
   >Software Makers Encouraged to Stop Using C/C++ by 2026
   >The federal government is encouraging software manufacturers to ditch C/C++ and take other actions that could “reduce customer risk,” according to the Product Security Best Practices report. In particular, CISA and the FBI set a deadline of Jan. 1, 2026, for compliance with memory safety guidelines.
   
   Lol
   
   https://www.techrepublic.com/article/cisa-fbi-memory-safety-recommendations/
   • Embed this notice
     Emi Yusa (gnuxeava@fedi.absturztau.be)'s status on Tuesday, 05-Nov-2024 23:56:57 JST Emi Yusa

     in reply to

     • Rusty Crab
     @RustyCrab they don't. The safe languages they have mentioned...
     If everyone collectively decided to stop using C/C++, it would lead to a lot more security issues because nobody would be up for maintaining
     soberano likes this.
   • Embed this notice
     Rusty Crab (rustycrab@clubcyberia.co)'s status on Tuesday, 05-Nov-2024 23:56:58 JST Rusty Crab

     in reply to
     @GNUxeava I don't think they can even wrap their brains around how much stuff both of those languages are embedded into.
   • Embed this notice
     tusooa :Cat_girls_Emoji_004: 西风 (tusooa@kazv.moe)'s status on Tuesday, 05-Nov-2024 23:58:20 JST tusooa :Cat_girls_Emoji_004: 西风

     in reply to

     • Rusty Crab

     @GNUxeava @RustyCrab

     Memory-safe languages approved by the NSA include:

     • Python.
     • [...]
     • Rust.
     • [...]

     Python interpreter is written in C and Rust compiler depends on LLVM, which is c++. lol.

     soberano likes this.
   • Embed this notice
     Emi Yusa (gnuxeava@fedi.absturztau.be)'s status on Wednesday, 06-Nov-2024 00:13:03 JST Emi Yusa

     in reply to

     • tusooa :Cat_girls_Emoji_004: 西风
     • Rusty Crab
     @RustyCrab @tusooa billions must *die*
     
     haha get the reference? cpu die :D :D
     Adi Nugroho likes this.
   • Embed this notice
     Rusty Crab (rustycrab@clubcyberia.co)'s status on Wednesday, 06-Nov-2024 00:13:04 JST Rusty Crab

     in reply to

     • tusooa :Cat_girls_Emoji_004: 西风
     @GNUxeava @tusooa billions of computers and no practical use found
   • Embed this notice
     Emi Yusa (gnuxeava@fedi.absturztau.be)'s status on Wednesday, 06-Nov-2024 00:13:05 JST Emi Yusa

     in reply to

     • tusooa :Cat_girls_Emoji_004: 西风
     • Rusty Crab
     @RustyCrab @tusooa i think nobody should be using machine code
     we could've done so many nice things but instead have only made abominations
   • Embed this notice
     Rusty Crab (rustycrab@clubcyberia.co)'s status on Wednesday, 06-Nov-2024 00:13:06 JST Rusty Crab

     in reply to

     • tusooa :Cat_girls_Emoji_004: 西风
     @tusooa @GNUxeava I get it but that's a rather autistic interpretation of what they mean. That's like saying "you shouldn't use machine code"
   • Embed this notice
     tusooa :Cat_girls_Emoji_004: 西风 (tusooa@kazv.moe)'s status on Wednesday, 06-Nov-2024 01:08:37 JST tusooa :Cat_girls_Emoji_004: 西风

     in reply to

     • Rusty Crab
     @RustyCrab @GNUxeava The logic is simple: if a compiler can't be trusted, then software compiled by that compiler can't be trusted either.
     soberano likes this.
   • Embed this notice
     Emi Yusa (gnuxeava@fedi.absturztau.be)'s status on Wednesday, 06-Nov-2024 01:08:54 JST Emi Yusa

     in reply to

     • tusooa :Cat_girls_Emoji_004: 西风
     • Rusty Crab
     @tusooa @RustyCrab with the kinds of stunts the compiler pulls with optimisations, this should've been common sense and taught in universities
     soberano likes this.
   • Embed this notice
     Flandere (flandrescarlet@uwu.social)'s status on Wednesday, 06-Nov-2024 01:09:02 JST Flandere

     in reply to

     @GNUxeava so in 2026, there will be no compliant operating systems, right? :02lurk: They all use C and/or C++ under the hood to some significant capacity :02lurk:

     soberano likes this.
   • Embed this notice
     Emi Yusa (gnuxeava@fedi.absturztau.be)'s status on Wednesday, 06-Nov-2024 01:09:23 JST Emi Yusa

     in reply to

     • Flandere
     @flandrescarlet I'd have some hope with rust but i have seen them going mia a bit too many times. even in the linux kernel
     why start and scream about the great benefits of rust everywhere when you can't even commit to maintaining it for even two weeks?
     then there is the politics with rust foundation
     soberano likes this.
   • Embed this notice
     Flandere (flandrescarlet@uwu.social)'s status on Wednesday, 06-Nov-2024 01:09:52 JST Flandere

     in reply to

     @GNUxeava maybe long term, but before 2026? :haha:

     Even if everyone held hands and working together in some fictional utopia world, it would simply take too much time to replace all that C and/or C++ code in existing codebases, by 2026 :haha:

     soberano likes this.