YAyarapavan·Nov 9, 2019Submission
2 points · Open discussionmicrosoft
MSRC-Security-Research
Python2018–2026
microsoft / MSRC-Security-Research
MSRC-Security-Research
Security Research from the Microsoft Security Response Center (MSRC)
18Distinct people
26Mentions
0Explicit recommenders
1.4KGitHub stars
What to know before exploring
What it is
Security Research from the Microsoft Security Response Center (MSRC)
GitHub
Where it is used
No documented product use was verified in the last source check.
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
No other repository is repeatedly linked in the same discussions.
This week on Hacker News
Nov 8–Nov 15 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/15/2026, 9:28:18 AM UTC.
No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.
Mentions over time
HN mentions by year26 dated mentions
Observed mentions: 2018-02-01 17:08:11 UTC to 2026-05-01 08:57:53 UTC.
* An incomplete calendar period is marked with an outlined bar. Its count is not directly comparable with a full period.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| 2018 | 2018-01-01 00:00:00 UTC | 2019-01-01 00:00:00 UTC | 2 | 1 | 1 |
| 2019 | 2019-01-01 00:00:00 UTC | 2020-01-01 00:00:00 UTC | 11 | 4 | 7 |
| 2020 | 2020-01-01 00:00:00 UTC | 2021-01-01 00:00:00 UTC | 5 | 4 | 1 |
| 2021 | 2021-01-01 00:00:00 UTC | 2022-01-01 00:00:00 UTC | 3 | 1 | 2 |
| 2022 | 2022-01-01 00:00:00 UTC | 2023-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2023 | 2023-01-01 00:00:00 UTC | 2024-01-01 00:00:00 UTC | 2 | 0 | 2 |
| 2024 | 2024-01-01 00:00:00 UTC | 2025-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2025 | 2025-01-01 00:00:00 UTC | 2026-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2026 (partial) | 2026-01-01 00:00:00 UTC | 2027-01-01 00:00:00 UTC | 1 | 0 | 1 |
What Hacker News says
11 sourcesMicrosoft security unit also thinks that way.
https://www.youtube.com/watch?v=PjbGojjnBZQ
https://github.com/microsoft/MSRC-Security-Research/tree/mas...
"Future development should be a mix of C#, Rust and constrained C++."
Which is also a reason why they aren't that bothered into keeping plain old C around on VC++, beyond ISO C++ requirements.
In Catching use-after-move C++ bugs with Clang's consumed annotationsNo, because Windows has plenty of C++ on it and Microsoft Security Team advocates using C#, Rust and constrained C++ (Core Guidelines) as the future of systems programming on Windows.
https://github.com/Microsoft/MSRC-Security-Research/blob/mas...
They are also very clear that C is done on Windows, and compatibility is only to the extent required by ISO C++ and a couple of key FOSS projects.
https://herbsutter.com/2012/05/03/reader-qa-what-about-vc-an...
UNIX is C's platform, there is hardly any reason to use it outside of non-UNIX OSes.
Plenty other languages offer system programming features, with better type safety and equal portability.
In Some Were Meant for C (2017) [pdf]Sure. Check the presentation slides.
https://github.com/Microsoft/MSRC-Security-Research/tree/mas...
In Why I rewrote the mesh generator of Dust3D from Rust to C++Which is why their security team is now pushing for C#, Rust and constrained C++ for new developments.
https://github.com/Microsoft/MSRC-Security-Research/tree/mas...
In Serious Chrome zero-dayI am with you.
As managed languages dev, I seldom use C++, but when I do it is the best system language currently available regarding tooling, libraries and hardware support (NVidia now makes GPGPU optimized for C++ semantics).
For app development, there aren't many scenarios where C++ is really necessary, whereas for systems it is going to stay around for years to come.
So anything that helps improving the quality of GCC, LLVM, CUDA, UWP, Metal Shaders, DirectX, Unreal/Unity/CryEngine/Cocos/Godot is more than welcome.
For anything else, we can just follow Microsoft's security suggestions as presented at Blue Hat IL, namely C# (replace by favourite managed language), Rust and modern C++.
https://github.com/Microsoft/MSRC-Security-Research/blob/mas...
In C++20 Design Is Complete: Modules, Coroutines in C++20Link to the presentation this article is based one but doesn't site for some reason:
https://github.com/Microsoft/MSRC-Security-Research/raw/mast...
In Microsoft: 70 percent of all security bugs are memory safety issueshttps://twitter.com/epakskape/status/1093488162318491648
https://github.com/Microsoft/MSRC-Security-Research/blob/mas...
In Microsoft: 70 percent of all security bugs are memory safety issuesBlueHatIL – Trends, challenge, and shifts in software vulnerability mitigation [pdf]
6 points · Open discussionTrends, challenge, and shifts in software vulnerability mitigation [pdf]
1 points · Open discussionTrends, challenge, and shifts in software vulnerability mitigation [pdf]
4 points · Open discussion