Chromium project finds that 70% of security defects are memory safety problems
Reminded me of an article I read last year (<a href="https:&#x2F;&#x2F;www.zdnet.com&#x2F;article&#x2F;microsoft-70-percent-of-all-security-bugs-are-memory-safety-issues&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.zdnet.com&#x2F;article&#x2F;microsoft-70-percent-of-all-se...</a>)<p>Interestingly enough Microsoft arrived at the same number. I think it really stresses how hard it is to reason about memory manually. I&#x27;m still surprised how much stuff is being written in non-safe languages even if people could get away with a managed language.<p>One thing that I just recently noticed when scrolling through some github repos is how much new software in the linux ecosystem is still written in C despite it being probably avoidable, like flatpak.