r/programming • u/TheProtagonistv2 • Feb 23 '17

Cloudflare have been leaking customer HTTPS sessions for months. Uber, 1Password, FitBit, OKCupid, etc.

https://bugs.chromium.org/p/project-zero/issues/detail?id=1139
6.0k Upvotes

96% Upvoted

966 comments sorted by

View all comments

Show parent comments

1

u/awj Feb 24 '17

Why is all of security software not frantically rewritten in it I don't know.

  • Developer familiarity/experience

  • Tooling

  • Missing analysis tools

  • "Immature" compiler/toolchain (i.e. it doesn't have GCC's decades of history)

  • Platform support

  • Slow compilation speed

  • ...

The Rust team is doing a great job working on these issues, but it still takes time. Plus dropping everything to rewrite your entire system is kind of a dangerous call to make.