Important switch from C/C++ to Rust: a new trend emerging in the world of dev
There is a new trend in the world of dev! Developers are starting to abandon C/C++ languages and switch to Rust, mainly for security reasons. Analytics Insight claims that big names in the industry are already using this programming language designed by Mozilla Research.
According to an article published in September 2022 “Apple, Amazon, Google, Meta, and Microsoft, among many others, all use Rust in some capability.”
Microsoft embraces Rust
Microsoft Azure CTO , Mark Russinovich, recently confirmed his clear opinion in favor of Rust. He published on his account that the dev industry should declare the C and C++ languages as obsolete, in particular for reasons of reliability. For its part, Microsoft has been talking about exploring Rust for several years now.
The MSRC (Microsoft Security Response Center) team has also affirmed that that about 70% of security issues to which it attributed a CVE could have been avoided by using this language.
His exact words:
“ …roughly 70 percent of the security issues that the MSRC assigns a CVE to are memory safety issues. This means that if that software had been written in Rust, 70% of these security issues would most likely have been eliminated.”
Rust places great importance on security
A dedicated team, whose role is to ensure the reliability of the language and to provide a high level of security, thanks to a well-developed working method, has been put in place with the support of JFrog and OpenSSF.
The latter will provide the resources as well as the people necessary to achieve this.
Team missions according to InfoWorld:
“Initial initiative entails performing a security audit and threat modeling exercises to identify how security can be economically maintained moving forward. The team will also help advocate for security practices across the Rust landscape… ».
Success story by Cloudflare, one of our partners
The American company Cloudflare, which happens to be one of our partners, is abandoning Nginx as part of its HTTP Proxy stack and has developed its own internal software called; Pingora, written with Rust. The results were satisfactory.
According to an article published on phoronix in September 2022:
“In production, Pingora consumes about 70% less CPU and 67% less memory compared to our old service with the same traffic load… Pingora is also deemed safer thanks in large part to the use of Rust.”
Conclusion
At AppWapp, we have a team of experienced developers, who code, for various projects to create secure websites or mobile applications. Do not hesitate to contact us for more details on our services or to call on us.
