Last week I presented my paper at SecDev on the impact #Rust has vs. #C++ on the probability of a vulnerability being introduced by a first-time contributor to a project—and therefore, how easy it is for newbies to get contributions merged. The full paper is available here:
cypherpunks.ca/~iang/pubs/grad…
but the tl;dr is: Rust significantly lowered the number of vulnerabilities introduced, especially from new contributors, and increased the quantity of new contributors to projects.
reshared this