Hacker News Reader

System level security seems to be the real solution to memory safety. Declaring invariants for an entire program gives you much more peace of mind than hoping there are no bugs in JVM.

Process separation is already a success story that eliminates who classes of exploits.

View on HN

The issue is one of attack surface. A program written in a memory safe language is extremely hard to exploit, especially remotely. But if you're talking about an attacker with local execution (who has already taken over a program) the attack surface is much larger.

Reply on news.ycombinator.com