Hacker News Reader

> "A tiny little C program" worries me on other fronts

A well configured valgrind scan during CI/CD phase and clang with all warnings should be enough to help with the traditional footguns.

View on HN

I consider "C", and "C armed with the best of static and dynamic analysis tools" to be two different languages for this purpose. I freely acknowledge this is a personal opinion not necessarily shared or understood by the programming community as a whole. I'm not a fan of the latter, but it is at least acceptable. I prefer something where the base language is less of a mess, and my analysis tools can spend less effort cleaning up those obvious messes, but technically, it can work. The former should not be exposed to the internet. This particular article appears to be the former.

I didn't get the last part. What's wrong with the article ?

It isn't necessarily "wrong", it's just "pure" C. I don't see any reference to using any additional analysis tools.

Reply on news.ycombinator.com