234
submitted 6 months ago by L4s@lemmy.world to c/technology@lemmy.world

White House urges developers to dump C and C++::Biden administration calls for developers to embrace memory-safe programing languages and move away from those that cause buffer overflows and other memory access vulnerabilities.

top 50 comments
sorted by: hot top controversial new old
[-] OutrageousUmpire@lemmy.world 79 points 6 months ago

I’m not sure what to think about this. It’s bizarre, the White House making any recommendations on programming languages.

They’re definitely not seen as an authority in this field. Why would anyone care what recommendation they make? And so why make one at all?

[-] mox@lemmy.sdf.org 65 points 6 months ago

They’re definitely not seen as an authority in this field. Why would anyone care what recommendation they make?

It's possible that they are acting on the advice of advisors who are authorities in this field.

And so why make one at all?

I expect it's because information and industrial security are components of national security, which is of great concern to them, and those things depend on software.

I'm not surprised to see this, given that state-sponsored electronic attacks are on the rise these days.

[-] EatATaco@lemm.ee 7 points 6 months ago

This is exactly why people sound sophomoric when they say "lobbying needs to go!" There are some drastic problems with lobbying as it is allowed now, but the last thing we need is the government regulating things they know nothing about without the input of experts. On top of that, it's nonsense that I can't pass my local councilman on the street and stop and push them to spend more time addressing important issues like climate change.

[-] mox@lemmy.sdf.org 11 points 6 months ago

It's important to remember that the argument against lobbying isn't about the broadest sense of the word "lobbying", but rather about corporations and other moneyed interests having unfair and unhealthy influence over the laws that govern everyone else.

The people who decry lobbying probably agree with you; they're just using the word in an implicitly narrow context.

load more comments (2 replies)
load more comments (2 replies)
[-] phoneymouse@lemmy.world 29 points 6 months ago

It’s a national security threat

[-] parens@programming.dev 13 points 6 months ago

C/C++ is a threat to mental stability

[-] phillaholic@lemm.ee 17 points 6 months ago

NIST are the experts guiding the White House.

load more comments (1 replies)
[-] someacnt_@lemmy.world 11 points 6 months ago

There have been words around this, like how software should be safe by design, but the regulation should come from the governing entity. This is simply materialized now, but there has been momentum.

[-] JoMomma@lemm.ee 61 points 6 months ago

Gov is getting rusty

[-] CaptainSpaceman@lemmy.world 49 points 6 months ago

Good luck with that, C/C++ are still crazy popular

[-] eager_eagle@lemmy.world 37 points 6 months ago

well... that's the point - if they weren't this wouldn't be a concern

[-] fruitycoder@sh.itjust.works 4 points 6 months ago

We really need to get the kids to stop programming with punch cards. /s

[-] AA5B@lemmy.world 4 points 6 months ago

Damn, it’s been like 25 years since I touched either of those. Aside from OS development, do people really do that anymore?

[-] ArmainAP@programming.dev 9 points 6 months ago

C++ is also the standard in game dev. You may see some C# here and there, but most engines, public available or otherwise, are built on C++.

If it is a AAA game, I can assure you it is most likely made with C++.

[-] poopsmith@lemmy.world 5 points 6 months ago

Most of the embedded world uses those.

load more comments (3 replies)
[-] omega_x3@lemmy.world 46 points 6 months ago

Team Fortran raise up, but not too fast our old bones aren't as strong as they used to be.

[-] BigDanishGuy@sh.itjust.works 6 points 6 months ago

Maybe you can use Team COBOL's wheelchairs as walkers?

load more comments (1 replies)
[-] Imgonnatrythis@sh.itjust.works 42 points 6 months ago

I think we should politicize code. It seems so unfettered by politics so far while so many other things are nicely split amongst party lines. Seems like maybe the Republicans should embrace C and the democrats can have python or something.

[-] sexual_tomato@lemmy.dbzer0.com 18 points 6 months ago* (last edited 6 months ago)

Republicans get C, Java, Lua, and C++; Democrats get Ada, Rust, C#, and Python; Libertarians get Zig, TCL, Julia, and Ocaml for some reason.

[-] WelcomeBear@lemmy.world 14 points 6 months ago

Ruby is just one guy, Vermin Supreme

[-] TORFdot0@lemmy.world 11 points 6 months ago

Ruby-off-the-rails

[-] yuriy@lemmy.world 4 points 6 months ago

Vermin Supreme still stands by his pony plan doesn’t he? You KNOW he’s out here using FiM++

load more comments (1 replies)
[-] mods_are_assholes@lemmy.world 5 points 6 months ago

haha as if repugnicunts code...

[-] NeatNit@discuss.tchncs.de 7 points 6 months ago

Can I both upvote and downvote you? Seems most appropriate

[-] parens@programming.dev 33 points 6 months ago

C/C++: so bad that even the white house takes notice 😂

[-] mox@lemmy.sdf.org 23 points 6 months ago

C isn't bad. It has been a good portable assembly language for ages, and remains so today. What's problematic is continuing to use it where more advanced languages now make more sense.

I won't defend C++, though. I'm happy to kick it to the curb now that better alternatives are gaining traction.

[-] darkevilmac@lemmy.zip 32 points 6 months ago

Probably a good idea, plenty of languages out there that can give good performance while being memory safe nowadays.

[-] hagelslager@feddit.nl 7 points 6 months ago

Such as? (Non-programmer here, so I don't know the ins and outs of programming languages.)

[-] darkevilmac@lemmy.zip 12 points 6 months ago

Zig and Rust come to mind, at least for replacements for low level languages.

load more comments (2 replies)
[-] Jakeroxs@sh.itjust.works 8 points 6 months ago
[-] scharf_2x40@lemmy.world 8 points 6 months ago* (last edited 6 months ago)

Isn't that only microsoft exclusive and closed source? Also does compiling it really yield the same speed as C, it is garbage collected isn't it?

[-] lemann@lemmy.dbzer0.com 9 points 6 months ago

Was always possible to compile+run C# on Linux using the Mono project. Until Microsoft "bought them out" and created .NET Core, a cross platform version of .NET that MS now encourages people to use instead...

Microsoft's new linux compile tools rub me the wrong way slightly, with the telemetry that's opt-in by default.

Mono is still extremely valuable for older .NET Framework apps under WINE though, way easier to setup compared to the official installers from what i've experienced.

No idea how compiled C# compares to C...

load more comments (1 replies)
load more comments (1 replies)
[-] Dzeimis@lemmy.world 18 points 6 months ago

Wtf, I thought this was a meme...

[-] treadful@lemmy.zip 10 points 6 months ago

“We, as a nation, have the ability—and the responsibility—to reduce the attack surface in cyberspace and prevent entire classes of security bugs from entering the digital ecosystem but that means we need to tackle the hard problem of moving to memory safe programming languages,” National Cyber Director Harry Coker said in the White House news release.

o7

[-] _NetNomad@kbin.run 10 points 6 months ago

segmentation fault (c and c++ dumped)

load more comments (1 replies)
[-] ricdeh@lemmy.world 6 points 6 months ago

C is not the problem, it's sloppy "programmers" who cannot handle direct memory control and who do not understand the underlying system architecture and how a microprocessor operates. People who are good at writing C can make code just as safe as the safest Rust code.

[-] dejected_warp_core@lemmy.world 10 points 6 months ago

While this is technically correct, it's tantamount to saying "just don't make mistakes", or arguing that a seatbelt is unnecessary because many are good enough drivers to not need it.

Languages like C and C++ do not prohibit the kinds of mistakes that the NSA told us two years ago lead to software vulnerabilities.

Other languages, like Rust, have higher guardrails built in and make it much more difficult to accidentally create the same failure modes.

[-] wolf@lemmy.zip 7 points 6 months ago

I love C, but C definitely is the problem.

While one disciplined programmer can in theory write correct code, once there is a small group of even good C programmers and a code base with more than around 3000-5000 LOC, there will be bugs. There is a good reason for tools like Valgrind etc.

While I think C and C++ are the problem, I don't think Rust is the solution, tho.

[-] daddy32@lemmy.world 6 points 6 months ago

It is just too easy to shoot yourself in the foot when using a foot gun... Sure the experts can avoid it, but that doesn't mean the foot gun is a good tool in general.

[-] lolcatnip@reddthat.com 5 points 6 months ago

Your take is objectively false. This issue has been studied and the conclusion every time is that real programmers make memory-related mistakes all the time. Even if there are a few superhuman programmers who never get tired, have a bad day, or misunderstand an API, firing the 99.99% of programmers who aren't superheroes isn't a realistic solution to anything.

load more comments (6 replies)
[-] makozuma@lemmy.world 5 points 6 months ago

Can’t we just bring back Forth and call it a day?

[-] Aopen@discuss.tchncs.de 5 points 6 months ago
load more comments
view more: next ›
this post was submitted on 28 Feb 2024
234 points (100.0% liked)

Technology

58066 readers
2692 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS