Re: Fwd: [friam] Could you/somebody make a safe browser?

On Fri, Mar 20, 2015 at 3:58 PM, Tony Arcieri <[email protected]> wrote:
> This is why I really like the work that Mozilla is doing with their new Servo rendering engine, written in Rust, a memory-safe language ...

I agree Servo is a step in the right direction, but
(1) the Rust stdlib has plenty of ambient authority. In 2012, I
started doing an audit, but I haven't managed to put enough time into
it to make a real contribution.
https://github.com/rust-lang/rust/issues/3094#issuecomment-9589749

Discipline around explicit authority seems just as important as
memory-safety. After all, PHP is memory-safe too.

(2) while one secure browser would be nifty, "insecurity anywhere is a
threat to security everywhere". As long as the bad guys can own
millions of machines, it's pretty hard to deploy services to a broad
audience with any confidence.

-- 
Dan Connolly
http://www.madmode.com/