今年1月 CISA（Cybersecurity and Infrastructure Security Agency）发布了一份 Product Security Bad Practice提到 The development of new product lines for use in service of critical infrastructure or NCFs in a memory-unsafe language (e.g., C or C++) where readily available alternative memory-safe languages could be used is dangerous and significantly elevates risk to national security, national economic security, and national public health and safety.
还珠楼主 发表于 2025-05-21 18:05 今年1月 CISA（Cybersecurity and Infrastructure Security Agency）发布了一份 Product Security Bad Practice提到 The development of new product lines for use in service of critical infrastructure or NCFs in a memory-unsafe language (e.g., C or C++) where readily available alternative memory-safe languages could be used is dangerous and significantly elevates risk to national security, national economic security, and national public health and safety.
Google: While Java is often described as platform-independent due to the Java Virtual Machine (JVM), the JVM itself, which forms the lower layer of the Java ecosystem, is typically implemented in C and C++. This means that when Java code is executed, it ultimately relies on C/C++ code at the level of the JVM to interact with the underlying operating system and hardware. C and C++ are used because they offer the necessary control and performance for system-level tasks.
drower 发表于 2025-05-21 18:22 Google: While Java is often described as platform-independent due to the Java Virtual Machine (JVM), the JVM itself, which forms the lower layer of the Java ecosystem, is typically implemented in C and C++. This means that when Java code is executed, it ultimately relies on C/C++ code at the level of the JVM to interact with the underlying operating system and hardware. C and C++ are used because they offer the necessary control and performance for system-level tasks.
还珠楼主 发表于 2025-05-21 18:05 今年1月 CISA（Cybersecurity and Infrastructure Security Agency）发布了一份 Product Security Bad Practice提到 The development of new product lines for use in service of critical infrastructure or NCFs in a memory-unsafe language (e.g., C or C++) where readily available alternative memory-safe languages could be used is dangerous and significantly elevates risk to national security, national economic security, and national public health and safety.
The development of new product lines for use in service of critical infrastructure or NCFs in a memory-unsafe language (e.g., C or C++) where readily available alternative memory-safe languages could be used is dangerous and significantly elevates risk to national security, national economic security, and national public health and safety.
但是公司的java职位，人家更倾向要现成经验的，一个10年java码农比一个10年c++码农更符合职位需求
哈哈😆确实！我们读大学那会儿，语言课顺序是C，同时学机器语言和汇编，C++靠后，最后才是Java，越学越容易。
Google: While Java is often described as platform-independent due to the Java Virtual Machine (JVM), the JVM itself, which forms the lower layer of the Java ecosystem, is typically implemented in C and C++. This means that when Java code is executed, it ultimately relies on C/C++ code at the level of the JVM to interact with the underlying operating system and hardware. C and C++ are used because they offer the necessary control and performance for system-level tasks.
Windows 底层没有C ?
你说这些我懂，问题是联邦政府配合这个报告还有个给各公司C-suite executives们看的白皮书，直接把C/C++放火上烤，以后C++职位会越来越少了
这个消息已经有很久了. 问题不在于语言, 在于用这些语言的人. Cybersecurity 现在制定各种规则就是为了保证无论人多笨, 都不会影响到系统安全. 然而然而这些治标不治本, 搞出一大堆protocol, 人不行还是会出问题. 美国政府机构的网络安全就是笑话, 随便找找都是漏洞, 奇怪为什么没有大规模针对州,县这一级的网络攻击.