Welcome to Incremental Social! Learn more about this project here!
Check out lemmyverse to find more communities to join from here!

TypicalHog ,

I'm like absolutely convinced Rust is the shit!

ricdeh ,
@ricdeh@lemmy.world avatar

C is not the problem, it's sloppy "programmers" who cannot handle direct memory control and who do not understand the underlying system architecture and how a microprocessor operates. People who are good at writing C can make code just as safe as the safest Rust code.

daddy32 ,

It is just too easy to shoot yourself in the foot when using a foot gun...
Sure the experts can avoid it, but that doesn't mean the foot gun is a good tool in general.

CatLikeLemming ,
@CatLikeLemming@lemmy.blahaj.zone avatar

If you're an expert tightrope walker, you're likely not gonna fall off. You can just do it without too much issue. When you're doing it over a chasm, and you don't plan on dying, you'd still probably prefer a harness though, wouldn't you?

Edit:
I'm not saying C is a bad language or anything, but for important applications the safety of actually memory safe languages is vital for lower-skilled programmers and still a good assistance for higher-skilled programmers, as we're all humans and it doesn't hurt to try and avoid the mistakes we will eventually make.

lolcatnip ,

I'll say it. C is a bad language. There was a time when it needed needed to exist and using it was a smart choice, but it has outlived its usefulness for anything but legacy code and niche use cases like FFI. It's in essentially the same category as Cobol.

mariusafa , (edited )

The bad language that all successor languages copied?

Edit: spell.

Crozekiel ,

Did you mean predecessor, like the languages that came before it?

mariusafa ,

Fuck I meant successor

lolcatnip ,

It wasn't bad at the time relative to what else was around.

And I don't even know what you're getting at by saying "all" successor languages copied it. Are you referring to how many languages use curly braces as block delimiters? Because that's not what's wrong with C.

dejected_warp_core ,

While this is technically correct, it's tantamount to saying "just don't make mistakes", or arguing that a seatbelt is unnecessary because many are good enough drivers to not need it.

Languages like C and C++ do not prohibit the kinds of mistakes that the NSA told us two years ago lead to software vulnerabilities.

Other languages, like Rust, have higher guardrails built in and make it much more difficult to accidentally create the same failure modes.

wolf ,

I love C, but C definitely is the problem.

While one disciplined programmer can in theory write correct code, once there is a small group of even good C programmers and a code base with more than around 3000-5000 LOC, there will be bugs. There is a good reason for tools like Valgrind etc.

While I think C and C++ are the problem, I don't think Rust is the solution, tho.

lolcatnip ,

Your take is objectively false. This issue has been studied and the conclusion every time is that real programmers make memory-related mistakes all the time. Even if there are a few superhuman programmers who never get tired, have a bad day, or misunderstand an API, firing the 99.99% of programmers who aren't superheroes isn't a realistic solution to anything.

frankenswine ,

sad stroustroup noises

Dzeimis ,

Wtf, I thought this was a meme...

badbytes ,

Good reason to not drop C and C++

parens ,

C/C++: so bad that even the white house takes notice 😂

mox ,

C isn't bad. It has been a good portable assembly language for ages, and remains so today. What's problematic is continuing to use it where more advanced languages now make more sense.

I won't defend C++, though. I'm happy to kick it to the curb now that better alternatives are gaining traction.

Rednax ,

The problem with C++ is not the lack of safety features. It's the ever lasting backwards compatibility that is keeping it both alive and down at the same time.

Having to support 50 year old code, is going to limit any restriction you place. But it is usually the restrictions that make a language good.

Example: You can write perfectly good modern C++ code without any pointers. But pointers are so ingrained into the language, that it is impossible to remove them.

Aopen ,
@Aopen@discuss.tchncs.de avatar

https://www.whitehouse.gov/wp-content/uploads/2024/02/Final-ONCD-Technical-Report.pdf

rottingleaf ,

I agree, let's start with dumping Windows.

foobaz ,

Done, next the Linux kernel? 😱

rottingleaf ,

It's a hard sacrifice to make, but if that means killing Windows, then mwahahaha... I mean, MS's power lies in supporting all that legacy.

makozuma ,

Can’t we just bring back Forth and call it a day?

_NetNomad ,
@_NetNomad@kbin.run avatar

segmentation fault (c and c++ dumped)

ricdeh ,
@ricdeh@lemmy.world avatar

Just write memory safe code lol

OutrageousUmpire ,

I’m not sure what to think about this. It’s bizarre, the White House making any recommendations on programming languages.

They’re definitely not seen as an authority in this field. Why would anyone care what recommendation they make? And so why make one at all?

mox ,

They’re definitely not seen as an authority in this field. Why would anyone care what recommendation they make?

It's possible that they are acting on the advice of advisors who are authorities in this field.

And so why make one at all?

I expect it's because information and industrial security are components of national security, which is of great concern to them, and those things depend on software.

I'm not surprised to see this, given that state-sponsored electronic attacks are on the rise these days.

EatATaco ,

This is exactly why people sound sophomoric when they say "lobbying needs to go!" There are some drastic problems with lobbying as it is allowed now, but the last thing we need is the government regulating things they know nothing about without the input of experts. On top of that, it's nonsense that I can't pass my local councilman on the street and stop and push them to spend more time addressing important issues like climate change.

mox ,

It's important to remember that the argument against lobbying isn't about the broadest sense of the word "lobbying", but rather about corporations and other moneyed interests having unfair and unhealthy influence over the laws that govern everyone else.

The people who decry lobbying probably agree with you; they're just using the word in an implicitly narrow context.

EatATaco ,

they’re just using the word in an implicitly narrow context.

I think we mostly agree, but disagree on this point. I think it's just that most people haven't given it any thought. Like they are just ignorantly going along with the popular opinion.

mox ,

I suppose mob mentality is likely to play some part in every widely shared view.

At the very least, I can guarantee that one of said people has given it thought. :)

porous_grey_matter ,

I don't think your argument quite holds up. The directionality is important. It's true that the government can't always know about technical things directly, but I think it's fine for the government to be expected to know which experts they need to consult, and for that process not to just be open to everyone (which just means more open to those with more money).

EatATaco ,

it’s fine for the government to be expected to know which experts they need to consult

What happens if they don't even know it's a problem? Or they don't realize the severity of the problem so it gets a lower priority?

And it also sounds like you're arguing that I can't talk to my local representative about what I think are the important issues that need to be addressed. If they have to seek me out, I would have zero input.

phoneymouse ,

It’s a national security threat

parens ,

C/C++ is a threat to mental stability

someacnt_ ,

There have been words around this, like how software should be safe by design, but the regulation should come from the governing entity.
This is simply materialized now, but there has been momentum.

phillaholic ,
@phillaholic@lemm.ee avatar

NIST are the experts guiding the White House.

Sweetpeaches69 ,

NIST is mentioned

confused and angry screaming

Mango ,

They can't even figure out language for human interpretation much less computer interpretation.

Imgonnatrythis ,

I think we should politicize code. It seems so unfettered by politics so far while so many other things are nicely split amongst party lines. Seems like maybe the Republicans should embrace C and the democrats can have python or something.

sexual_tomato ,

Republicans get C, Java, Lua, and C++; Democrats get Ada, Rust, C#, and Python; Libertarians get Zig, TCL, Julia, and Ocaml for some reason.

rottingleaf ,

I thought this is a tech space, but you've just made a lot of people Republicans.

One would also expect Ada to be Republican.

And can libertarians please have Common Lisp?

Sylvartas ,

Ada could never be republican, on the basis that it's named after a british woman scientist. I don't think she's on record as a feminist, but that's about the only thing that would make her "worse" in their eyes

Also why do the democrats only get languages for people who don't care about performances ? /s ^(it's just a prank bro)

rottingleaf ,

I was thinking about the association of the Ada language with defense stuff, and also her being Byron's daughter, which is more specific than being British, I'm not sure she'd complain about associations with Republicanism, but then this can also be interpreted in favor of libertarians.

No, the question is valid about weird selection of languages for Democrats. I think what they meant is that separation of various issues between parties is orthogonal to any sane logic, so we should do this with programming languages too.

Also I want to know who gets Erlang.

WelcomeBear ,

Ruby is just one guy, Vermin Supreme

TORFdot0 ,

Ruby-off-the-rails

yuriy ,

Vermin Supreme still stands by his pony plan doesn’t he? You KNOW he’s out here using FiM++

WelcomeBear ,

I stand corrected!

mods_are_assholes ,

haha as if repugnicunts code...

Mango ,

Why do Republicans get the good stuff?

NeatNit ,

Can I both upvote and downvote you? Seems most appropriate

treadful ,
@treadful@lemmy.zip avatar

“We, as a nation, have the ability—and the responsibility—to reduce the attack surface in cyberspace and prevent entire classes of security bugs from entering the digital ecosystem but that means we need to tackle the hard problem of moving to memory safe programming languages,” National Cyber Director Harry Coker said in the White House news release.

o7

omega_x3 ,

Team Fortran raise up, but not too fast our old bones aren't as strong as they used to be.

BigDanishGuy ,

Maybe you can use Team COBOL's wheelchairs as walkers?

TunaLobster ,

I updated an internal library from 77 to 90 last week. We're working quickly these days!

JoMomma ,

Gov is getting rusty

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • technology@lemmy.world
  • random
  • incremental_games
  • meta
  • All magazines
    •