Skip to main content


Last week I presented my paper at SecDev on the impact #Rust has vs. #C++ on the probability of a vulnerability being introduced by a first-time contributor to a project—and therefore, how easy it is for newbies to get contributions merged. The full paper is available here:

https://cypherpunks.ca/~iang/pubs/gradingcurve-secdev23.pdf

but the tl;dr is: Rust significantly lowered the number of vulnerabilities introduced, especially from new contributors, and increased the quantity of new contributors to projects.

#rust #c

reshared this