https://peertube.watch/videos/watch/94f54378-fc59-416b-b909-ae329b230e88 C and C++ are consistently the preferred languages for systems programming, embedded systems, and various performance-critical applications. C and C++ are also susceptible to various defects, such as memory-safety issues, that account for a significant portion of security vulnerabilities in C and C++ software. Addressing the memory-safety challenge has recently received new focus as leading cybersecurity organizations from various countries have collectively emphasized the significant risks posed by memory-safety issues. With the ubiquitous use of C and C++ in the embedded device, industrial controls, and IoT space, the chances of removing and replacing C and C++ are virtually nil. To improve software to be more memory-safe, a series of techniques will need to be undertaken to gradually evolve the quality and security of the code: migration to memory-safe alternatives, such as Rust, especially for critical software, easier to use tooling for debugging, diagnostics and application security testing, pro-active vulnerability mitigation and prevention in software though the use of compiler-based binary hardening mechanisms, In November 2023, the Open Source Security Foundation (OpenSSF) published the Compiler Options Hardening Guide for C and C++ that is focused on helping developers make informed choices regarding compiler options to harden their software against prevalent software defects. Compiler flags are powerful tools that can significantly enhance the security of C and C++ code without requiring expensive refactoring or rewriting in newer, more memory-safe languages. Many such compiler features are also useful for discovering memory safety issues during debugging and testing. In this talk, Thomas will give an introduction to the OpenSSF Compiler Options Hardening Guide for C and C++. He will talk about how the guide came into existence in the OpenSSF, its current structure and future extensions. This talk particularly intends to actively invite feedback and call for collaboration. Speaker: Thomas Nyman, Track: Lightning talks, Room: H.2215 (Ferrer), When: Sunday 4 February 2024, 10:00–10:15 (Brussels time), Schedule: FOSDEM 2024 event page, Slides & links Nyman - Compiler Options Hardening for C and C++ (slides), Licence: Creative Commons Attribution 2.0 Belgium (CC BY 2.0 BE) (as stated in the FOSDEM video archive). Attribution: “Compiler Options Hardening for C and C++” by Thomas Nyman, FOSDEM 2024. Original recording: 2024/h2215/fosdem-2024-3468-compiler-options-hardening-for-c-and-c-.av1.webm from the FOSDEM video archive. This channel is an unofficial mirror; FOSDEM is a free and non-commercial event organised by the community for the community. Sun, 25 Oct 2026 01:52:43 GMT https://validator.w3.org/feed/docs/rss2.html PeerTube - https://peertube.watch https://peertube.watch/lazy-static/avatars/3b284627-b75f-409e-ac2e-10f4c2946f43.png https://peertube.watch/videos/watch/94f54378-fc59-416b-b909-ae329b230e88 All rights reserved, unless otherwise specified in the terms specified at https://peertube.watch/about and potential licenses granted by each content's rightholder.