Jonas L

We must stop using silly terminology such as 'Offensive C'. Dennis Ritchie did not design the C programming language with weaponization in mind. C is a simple programming language which provides the capabilities to create both offensive and defensive tool sets.

Every anti-virus is written in C, or C++. Have you ever heard them market their work as utilizing 'Defensive C'? RIP Dennis Ritchie

Is this sarcasm?

Nah, @jonasLyk provides a ref. A combo of syntax, macros, optimizations for compilers & humans to create software. It's a standard. If OSS adopted the practice it could lead to less malicious implants by bad actors http://www.open-std.org/jtc1/sc22/wg21/docs/papers/2020/p2064r0.pdf … http://www.open-std.org/jtc1/sc22/wg21/docs/papers/2014/n4075.pdf …

When I think defensive programming i am not thinking about some whacky standard- i think about a mindset. The mindset of having two entities- you and the client, the client can be you tomorrow, it is just a placeholder for someone that somehow uses your creation.

Now- you are in a situation where you have to design something to accomplish something. Now comes your toolbox of encapsulation, syntax and design patterns. What you create - should be impossible to use wrong by the client. Needing to remember to call an init? No way! crazy