Not sure I saw this coming
Kind of interesting and funny to see the US federal government weigh in on a topic of such specificity in software development.
whitehouse.gov
For further actions, you may consider blocking this person and/or reporting abuse
Top comments (16)
Good time to learn rust π
Is Andrew Bone a government mole?
Deep state sleeper agent.
Before the sleeper awakens, we all had better learn Rust. And pronto!
Lol
Love
The White House should familiarize itself with the OWASP Top Ten.
Thatβll solve the problem
It's just wild that the first major product of this commission is this. I know this won't be the only thing they'll release, but I have a lot of issues where people talk about memory safety like it's a silver bullet.
The problems with software quality which lead to security flaws are almost always attributed to folks not having process around development and quality which require folks take their time when writing code, and don't review or test their code for security.
I've been working in the industry for nearly 26 years, and I keep finding that organizations which have higher quality products have it because they intentionally built them to be high quality.
No amount of a memory-safe language is going to dig us out of a mess created by organizations which tell people to write code and fail to give them the time and tools to make sure their product is good.
It might seem surprising to see this from the Whitehouse, but some months ago, the NSA and CISA along with their counterparts from other countries made this recommendation.
U.S. and International Partners Issue Recommendations to Secure Software Products Through Memory Safety > National Security Agency/Central Security Service > Press Release View
FORT MEADE, Md. - The National Security Agency (NSA) joins Cybersecurity and Infrastructure Security Agency (CISA) and U.S. and international partners in releasing βThe Case for Memory Safe Roadmapsβ
Fun that the govenrment choose to wiegh in on memory operations, but not more public accessible and tangible things like password reuse across multiple platforms and multi-factor authentication.
OK, immediately self-debunked my own statement: cbsnews.com/news/white-house-cyber...
TBF it was 8 years ago and in a country I'm not in.
I hope it's not for ALL the software that anyone is producing π
Rust time π
Start learning C# :)
Some comments may only be visible to logged-in visitors. Sign in to view all comments.