Experimental News Clipping Site

Tag: memory-safe languages

  • Hacker News: Taming the UB Monsters in C++

    —

    by

    Kurt Seifried
    in

    Source URL: https://herbsutter.com/2025/03/30/crate-training-tiamat-un-calling-cthulhutaming-the-ub-monsters-in-c/ Source: Hacker News Title: Taming the UB Monsters in C++ Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The provided text discusses significant ongoing improvements in the C++ programming language pertaining to software security and undefined behavior (UB). It highlights efforts to enhance C++ by addressing critical vulnerabilities that can lead…

  • Hacker News: Memory Safety for Web Fonts

    —

    by

    Kurt Seifried
    in

    Source URL: https://developer.chrome.com/blog/memory-safety-fonts Source: Hacker News Title: Memory Safety for Web Fonts Feedly Summary: Comments AI Summary and Description: Yes Summary: The text details Google’s transition from the FreeType font processing library to Skrifa, a Rust-based alternative, aimed at enhancing security and efficiency within Chrome. This shift emphasizes the importance of memory safety in preventing…

  • The Register: Strap in, get ready for more Rust drivers in Linux kernel

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/03/10/rust_drivers_expected_to_become/ Source: The Register Title: Strap in, get ready for more Rust drivers in Linux kernel Feedly Summary: Likening memory safety bugs to smallpox may not soothe sensitive C coders Rust is alive and well in the Linux kernel and is expected to translate into noticeable benefits shortly, though its integration with the…

  • Google Online Security Blog: Securing tomorrow’s software: the need for memory safety standards

    —

    by

    Kurt Seifried
    in

    Source URL: http://security.googleblog.com/2025/02/securing-tomorrows-software-need-for.html Source: Google Online Security Blog Title: Securing tomorrow’s software: the need for memory safety standards Feedly Summary: AI Summary and Description: Yes Summary: The text discusses the critical issue of memory safety vulnerabilities and advocates for a shift towards secure-by-design practices to enhance overall security across the software industry. It emphasizes the…

  • The Register: The Feds want developers to stop coding ‘unforgivable’ buffer overflow vulns

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/02/13/fbi_cisa_unforgivable_buffer_overflow/ Source: The Register Title: The Feds want developers to stop coding ‘unforgivable’ buffer overflow vulns Feedly Summary: FBI, CISA harrumph at Microsoft and VMware in call for coders to quit baking avoidable defects into stuff US authorities have labelled buffer overflow vulnerabilities “unforgivable defects”, pointed to the presence of the holes in…

  • Alerts: CISA and FBI Warn of Malicious Cyber Actors Using Buffer Overflow Vulnerabilities to Compromise Software

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2025/02/12/cisa-and-fbi-warn-malicious-cyber-actors-using-buffer-overflow-vulnerabilities-compromise-software Source: Alerts Title: CISA and FBI Warn of Malicious Cyber Actors Using Buffer Overflow Vulnerabilities to Compromise Software Feedly Summary: CISA and the Federal Bureau of Investigation (FBI) have released a Secure by Design Alert, Eliminating Buffer Overflow Vulnerabilities, as part of their cooperative Secure by Design Alert series—an ongoing series aimed…

  • Alerts: CISA and FBI Release Updated Guidance on Product Security Bad Practices

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2025/01/17/cisa-and-fbi-release-updated-guidance-product-security-bad-practices Source: Alerts Title: CISA and FBI Release Updated Guidance on Product Security Bad Practices Feedly Summary: In partnership with the Federal Bureau of Investigation (FBI), CISA released an update to joint guidance Product Security Bad Practices in furtherance of CISA’s Secure by Design initiative. This updated guidance incorporates public comments CISA received…

  • The Register: Boffins carve up C so code can be converted to Rust

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2025/01/03/mini_c_microsoft_inria/ Source: The Register Title: Boffins carve up C so code can be converted to Rust Feedly Summary: Mini-C is a subset of C that can be automatically turned to Rust without much fuss Computer scientists affiliated with France’s Inria and Microsoft have devised a way to automatically turn a subset of C…