[Oberon] Memory-unsafe languages discouraged by US Government
Skulski, Wojciech
skulski at pas.rochester.edu
Fri Mar 1 06:00:14 CET 2024
The US White House put out a document discouraging the use of memory-unsafe languages like C/C++ due to their inherent lack of security. Apparently memory mismanagement is the cause of ~70% of security vulnerabilities. The Gov't recommended a number of safer languages instead, like Rust, Delphi/Pascal, Python, or Javascript.
Quoting from the text: The highest leverage method to reduce memory safety vulnerabilities is to secure one of the building blocks of cyberspace: the programming language. Using memory safe programming languages can eliminate most memory safety errors. While in some distinct situations, using a memory safe language may not be feasible – this report examines space systems as a unique edge case and identifies memory safe hardware and formal methods as complementary ways to achieve a similar outcome – in most cases, using a memory safe programming language is the most efficient way to substantially improve software security
BACK TO THE BUILDING BLOCKS: A PATH TOWARD SECURE AND MEASURABLE SOFTWARE, FEBRUARY 2024
https://www.whitehouse.gov/wp-content/uploads/2024/02/Final-ONCD-Technical-Report.pdf
More information about the Oberon
mailing list