This is so funny. Yesterday there was another discussion on how C needs to be replaced due to security/corectness concerns (the K&R topic), today people are fascinated by a UI(!!!) library built in it.
And they actually consider using this library.
And they actually consider using this library.
There has been a lot of negativity/arguments against C here lately, which in my opinion has been very exaggerated.
Seriously, how often do you guys write GUI apps that _also need to be secure_? An application isn't secure just because you write it in another language, there's a lot more work to it. If there is even such a thing as secure.
If you communicate over a Network with not fully trusted remote endpoints, and handle text you have a fair chance of remote code execution in C. A git front end. A text editor. Anything written in C has a fair chance to making a mistake.
Your very basic attitude is an example to the problem the industry is having!
We will always make mistakes, no matter how hard we try, but not caring for such an important topic from upstart is a not simply a mistake, but an outright sin!
Security, robustness are some examples which are way too hard to add to a software when not taken into account upfront at design time!
C is not the right tool for these tasks.
I stand by my point. Simply "not using C" isn't magically going to make your application so much more secure.
Also note: local files may also be rigged... Other languages protect for whole classes of vulnerabilities with negligible costs.
About the reasonable security: http://www.tripwire.com/state-of-security/latest-security-ne...
https://curl.haxx.se/docs/vulnerabilities.html (Kudos to the curl authors for this nice overview!)
2) Some things very much need to never be on a wider network with untrusted nodes. This is easier than it sounds...