> Another notable one is C vs C++. Short version: I think C++ is fine and makes it a lot easier to do many things, but anyone writing C++ should have YAGNI and KISS tattooed on their forehead.
But that is the pain point. Most developers don't care to wear such tattoos.
Lint was created alongside C and left to a separate tool as per UNIX philosophy.
The result is that C and C++ developers never cared about it.
We had to wait for LLVM and daily security exploits for developers to start caring about it.
And now almost every C and C++ compilers offer static analysis.
This is why languages like Ada and SPARK are slowly being looked into by some European companies.
Intel is building pointer and buffer validation in their new processors as a means to help bringing safety to exiting applications:
But that is the pain point. Most developers don't care to wear such tattoos.
Lint was created alongside C and left to a separate tool as per UNIX philosophy.
The result is that C and C++ developers never cared about it.
We had to wait for LLVM and daily security exploits for developers to start caring about it.
And now almost every C and C++ compilers offer static analysis.
This is why languages like Ada and SPARK are slowly being looked into by some European companies.
Intel is building pointer and buffer validation in their new processors as a means to help bringing safety to exiting applications:
https://software.intel.com/en-us/articles/introduction-to-in...
When security is not outsourced to a separate tool, it cannot be avoided.