Free Republic
Browse · Search
General/Chat
Topics · Post Article

Skip to comments.

White House urges developers to avoid C and C++, use 'memory-safe' programming languages
Tomshardware ^ | 02 28 2024 | Les Pounder

Posted on 02/28/2024 1:41:30 PM PST by yesthatjallen

The government would prefer it if you stopped programming tools in C or C++. In a new report, the White House Office of the National Cyber Director (ONCD) has called on developers to use "memory-safe programming languages," a category which excludes the popular languages. The advice is part of U.S. President Biden's Cybersecurity strategy and is a move to "secure the building blocks of cyberspace."

Memory safety refers to protection from bugs and vulnerabilities which deal with memory access. Buffer overflows and dangling pointers are examples of this. Java is considered a memory-safe language due to its runtime error detection checks. However, C and C++ both allow arbitrary pointer arithmetic with direct memory addresses and no bounds checking.

In 2019, Microsoft security engineers reported that around 70% of security vulnerabilities were caused by memory safety issues. Google reported the same figure in 2020, this time for bugs found in the Chromium browser.

" Experts have identified a few programming languages that both lack traits associated with memory safety and also have high proliferation across critical systems, such as C and C++," the report reads. "Choosing to use memory safe programming languages at the outset, as recommended by the Cybersecurity and Infrastructure Security Agency’s (CISA).

SNIP

(Excerpt) Read more at tomshardware.com ...


TOPICS:
KEYWORDS: c; programming; whitehouse
Navigation: use the links below to view more comments.
first 1-2021-4041-6061-68 next last
In 2019, Microsoft security engineers reported that around 70% of security vulnerabilities were caused by memory safety issues. Google reported the same figure in 2020, this time for bugs found in the Chromium browser.

The same Chromium browser Google has been forcing on us.

1 posted on 02/28/2024 1:41:30 PM PST by yesthatjallen
[ Post Reply | Private Reply | View Replies]

To: yesthatjallen

Biden wasted all those coal miners’ time when he told them to “learn to code” without first telling them which languages to code in.


2 posted on 02/28/2024 1:44:57 PM PST by Tell It Right (1st Thessalonians 5:21 -- Put everything to the test, hold fast to that which is true.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: yesthatjallen
Use C and C++

Got it!

3 posted on 02/28/2024 1:45:03 PM PST by aynrandfreak (Being a Democrat means never having to say you're sorry)
[ Post Reply | Private Reply | To 1 | View Replies]

To: yesthatjallen

OK ... but can they have Joe Biden hold a press conference with Q&A and explain all this?


4 posted on 02/28/2024 1:45:41 PM PST by plain talk
[ Post Reply | Private Reply | To 1 | View Replies]

To: yesthatjallen

America, America,
God shed His grace on thee,
And crown thy good with brotherhood
From C to ++C.


5 posted on 02/28/2024 1:45:54 PM PST by chajin ("There is no other name under heaven given among people by which we must be saved." Acts 4:12)
[ Post Reply | Private Reply | To 1 | View Replies]

To: yesthatjallen

I Know FORTRAN ,,,,!!


6 posted on 02/28/2024 1:46:53 PM PST by njslim
[ Post Reply | Private Reply | To 1 | View Replies]

To: yesthatjallen

LOL As if any of the corrupt morons in the “Biden” junta know anything about software.


7 posted on 02/28/2024 1:47:22 PM PST by pierrem15 ("Massacrez-les, car le seigneur connait les siens" )
[ Post Reply | Private Reply | To 1 | View Replies]

To: aynrandfreak

“Use C and C++ Got it!”

Must use C or C++ and maybe Linux. I wonder if there is back doors in C#.


8 posted on 02/28/2024 1:48:17 PM PST by DEPcom (DC is not my Capitol after Jan 6th lock downs.)
[ Post Reply | Private Reply | To 3 | View Replies]

To: yesthatjallen

>In 2019, Microsoft security engineers reported that around 70% of security vulnerabilities were caused by memory safety issues.

Sh!tty programmers, poor coding standards. Code bloat. Poor specifications. Improper memory management. Lack of proper testing. etc, etc, etc.


9 posted on 02/28/2024 1:49:57 PM PST by fretzer
[ Post Reply | Private Reply | To 1 | View Replies]

To: yesthatjallen

If Pascal is making a comeback, I’m interested.


10 posted on 02/28/2024 1:50:13 PM PST by voicereason (When a bartender can join Congress and become a millionaire...there’s a problem.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Lazamataz

Ping.


11 posted on 02/28/2024 1:52:31 PM PST by Army Air Corps (Four Fried Chickens and a Coke)
[ Post Reply | Private Reply | To 1 | View Replies]

To: yesthatjallen

Why am I not surprised that Biden is telling developers how to avoid memory leaks? After all, he’s an authority on that.


12 posted on 02/28/2024 1:53:36 PM PST by ProtectOurFreedom (“Occupy your mind with good thoughts or your enemy will fill them with bad ones.” ~ Thomas More)
[ Post Reply | Private Reply | To 1 | View Replies]

To: njslim

That’s the ticket!

I’m embarrassed to admit I’m old enough to know Fortran, much less program in it 😂


13 posted on 02/28/2024 1:56:13 PM PST by rdcbn1
[ Post Reply | Private Reply | To 6 | View Replies]

To: yesthatjallen

Government involved with commerce is always a stupid thing.


14 posted on 02/28/2024 1:56:36 PM PST by CodeToad (Rule #1: The elites want you dead.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: yesthatjallen

Java is an interpreted language. That has its own set of problems, including performance.


15 posted on 02/28/2024 2:01:30 PM PST by ganeemead (everything )
[ Post Reply | Private Reply | To 1 | View Replies]

To: ProtectOurFreedom

He is a bigger expert on diaper leaks.


16 posted on 02/28/2024 2:01:31 PM PST by Freedumb
[ Post Reply | Private Reply | To 12 | View Replies]

To: fretzer

Assembly on non-networked, air gaped small systems.


17 posted on 02/28/2024 2:06:26 PM PST by Paladin2
[ Post Reply | Private Reply | To 9 | View Replies]

To: yesthatjallen
The same Chromium browser Google has been forcing on us.

The Microsoft Edge browser is Chromium with a different wrapper. If you don't want a Chromium browser use something else. There are plenty to choose from.

18 posted on 02/28/2024 2:08:12 PM PST by Augie
[ Post Reply | Private Reply | To 1 | View Replies]

To: rdcbn1; njslim
I’m embarrassed to admit I’m old enough to know Fortran, much less program in it

Fortran was what I started on.

I don't know if that should embarrass me or send me to the depths of depression for being older than dirt. lol

19 posted on 02/28/2024 2:11:49 PM PST by Augie
[ Post Reply | Private Reply | To 13 | View Replies]

To: yesthatjallen

How much were they paid to do this?


20 posted on 02/28/2024 2:12:28 PM PST by Fresh Wind (Nothing says "Democracy" like throwing your opponents into jail.)
[ Post Reply | Private Reply | To 1 | View Replies]


Navigation: use the links below to view more comments.
first 1-2021-4041-6061-68 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
General/Chat
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson