In a blog post, Google has explained how it makes its software less susceptible to flaws and vulnerabilities, and thus less interesting to cybercriminals. Its approach includes two key pillars: hardening super-popular, yet unsafe, programming languages, while slowly (but surely) transitioning towards up-and-coming, memory-safe languages.
The article, by Alex Rebert of Security Foundations, and Core Developers Chandler Carruth, Jen Engel, Andy Qin, claims about 70% of severe vulnerabilities in memory-unsafe codebases are due to memory safety bugs.
