OpenSSL Security Advisory
By my count 12 out of the 14 vulnerabilities in this advisory are due to manual memory management. And past ones were similar.<p>This is security critical code, being developed and polished for more than a decade, and the only thing protecting the privacy of millions (billions?) of people. If any public project should have gotten this right, it should be this. Yet it can't.<p>Is this time to admit we simply can't do manual memory management at this level and move to something else? I know the performance boost is tempting, but I think we can't afford the consequences.