Back in December of 2023, the Cybersecurity and Infrastructure Security Agency (CISA) published a report<\/a> that included a list of memory-safe programming languages, among them was the Python programming language<\/b>.<\/p>\n The Python Software Foundation\u2019s response to the US Government’s Request for Information<\/a> noted Python’s memory-safety and ability to wrap code written in C, C++, and Rust among other systems languages. Part of Python\u2019s popularity stems from the large number of community-maintained packages using this feature for performance, wrapping existing libraries, and low-level API access.<\/p>\n Cryptography<\/a> is one of the most depended on Python libraries for cryptographic primitives, installed nearly 10 million times per day. Cryptography started migrating from using C to Rust<\/a> for security reasons in 2020 and made the first release with Rust binary extensions in 2021. You can listen to maintainers Paul Kehrer and Alex Gaynor discuss this non-trivial migration in their PyCon 2022 talk<\/a>.<\/p>\n The migration of the cryptography library included tools like PyO3<\/a> and setuptools-rust<\/a> that enable easier adoption of Rust binary extensions. There\u2019s already plenty of buzz for using Rust and Python together, the adoption of Rust in Python packages is steadily increasing<\/a> from the single digits in 2020 to today with hundreds of packages using Rust.<\/b><\/p>\n There are many opportunities to learn about writing Python binary extensions using Rust, for example, at PyCon US 2024<\/a> there will be a tutorial about getting started with PyO3<\/a> and a talk on PyO3 and maturin<\/a>, a PEP 517 build backend for Rust<\/a> by a maintainer of the PyO3 project.<\/p>\n Historically Python binary extensions were built mostly using C and C++ meaning there are many projects which, for reasons like backwards compatibility or lack of resources and time, cannot or do not want to migrate to Rust. For these projects, the use of compiler options can harden binaries against some memory safety issues. The OpenSSF Best Practices working group has published a list of compiler options<\/a> to consider adopting in order to harden builds of C and C++ code.<\/p>\n There is still much work to be done to secure the Python ecosystem and it can\u2019t be done without our amazing community of contributors and maintainers. We look forward to more investment in this area as part of the industries\u2019 adoption of memory-safe programming languages. If you are interested in being part of conversations around improving security in Python, we invite you to open a thread on discuss.python.org<\/a>.<\/p>\n\n Earlier this week the White House published a report recommending the use of memory-safe programming languages to eliminate an entire class of vulnerabilities affecting software. The report quotes claims from large software producers like Google and Mi…<\/p>\n<\/div>","protected":false},"author":2051,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"slim_seo":{"title":"White House recommends use of memory-safe languages like Python - ITTeacherITFreelance.hk","description":"Earlier this week the White House published a report recommending the use of memory-safe programming languages to eliminate an entire class of vulnerabilities a"},"footnotes":""},"categories":[10700],"tags":[],"_links":{"self":[{"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/posts\/329611"}],"collection":[{"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/users\/2051"}],"replies":[{"embeddable":true,"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/comments?post=329611"}],"version-history":[{"count":1,"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/posts\/329611\/revisions"}],"predecessor-version":[{"id":329612,"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/posts\/329611\/revisions\/329612"}],"wp:attachment":[{"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/media?parent=329611"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/categories?post=329611"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/itteacheritfreelance.hk\/wordpress\/index.php\/wp-json\/wp\/v2\/tags?post=329611"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}![\\\"IT\u96fb\u8166\u88dc\u7fd2](\\\"http:\/\/itteacheritfreelance.hk\/test\/wordpress\/wp-content\/uploads\/2016\/05\/logo2-2.png\\\"){kind=logo}
\r\nwww.itsec.hk<\/a>
\r\nwww.itsec.vip<\/a>
\r\nwww.itseceu.uk<\/a>
<\/p>","protected":false},"excerpt":{"rendered":"