I think your expectations are too high. During our initial exploration we actually managed to talk to Todd Miller, the maintainer of sudo. In our (brief) interactions with him he did not sound cavalier like this at all. Instead I think that a lot of the issues with sudo are more about it being a thirty+ year old program and codebase, and sometimes features turn into bugs and security issues all on their own in such time periods. But then again, C just cannot offer the kinds of protections that Rust can, and mistakes will be made eventually by every human, better to have some protection from your mistakes than none at all.
Comments
Or because it's not been developed with enough care?
I for one think that there is no unsafe language, only careless programmers.
Perhaps you didn't intend it this way, but that implies that there is no difference in safety between languages. This is a patently absurd idea.
C is clearly less safe than many languages that don't allow unsafe memory practices.
I think your expectations are too high. During our initial exploration we actually managed to talk to Todd Miller, the maintainer of sudo. In our (brief) interactions with him he did not sound cavalier like this at all. Instead I think that a lot of the issues with sudo are more about it being a thirty+ year old program and codebase, and sometimes features turn into bugs and security issues all on their own in such time periods. But then again, C just cannot offer the kinds of protections that Rust can, and mistakes will be made eventually by every human, better to have some protection from your mistakes than none at all.
Right! Like with airplanes, there are no unsafe airplanes, only careless pilots.
This analogy is completely wrong. The programmer would be the aero engineer, not the pilot.
The pilot would be the sysadmin, maybe?