calle
· 8w
why humans should not code in c: we're finding memory-safety vulnerabilities in c projects that are prevented by default in many other languages.
in the past, finding a simple buffer overflow wasn't ...
libsecp256k1 is a counterexample on C; it's a combination of the right people and the right task, but it's possible, it's just a very narrow field so I'm only like 10% disagreeing there.
On Lightning, yes, there is some kind of generic 'higher complexity' here; e.g. it's obvious you're going to have more attack surface in a coinswap codebase than in a coinjoin codebase.
❤️1✅1