DEV Community

Discussion on: Whitehouse Declares Software Should Be Memory Safe

Collapse
 
manchicken profile image
Mike Stemle

The White House should familiarize itself with the OWASP Top Ten.

Collapse
 
ben profile image
Ben Halpern

That’ll solve the problem

Collapse
 
manchicken profile image
Mike Stemle • Edited

It's just wild that the first major product of this commission is this. I know this won't be the only thing they'll release, but I have a lot of issues where people talk about memory safety like it's a silver bullet.

The problems with software quality which lead to security flaws are almost always attributed to folks not having process around development and quality which require folks take their time when writing code, and don't review or test their code for security.

I've been working in the industry for nearly 26 years, and I keep finding that organizations which have higher quality products have it because they intentionally built them to be high quality.

No amount of a memory-safe language is going to dig us out of a mess created by organizations which tell people to write code and fail to give them the time and tools to make sure their product is good.