Hacker News new | ask | show | jobs
by saagarjha 2291 days ago
> Just as JS should not be found in the server

Said who?

> You can't have an entire industry push this terrible ecosystem, then expect security companies to miss out on the fun.

I would expect most security experts to push you to use JavaScript instead of C++, since the former will protect you from a number of rather common security issues in the latter…

> Locating and hiring C++ engineers at a scale is something that has become very, very difficult.

Is it really that hard? Here, I can help: I know C++, and I'll be graduating soon. Hire me ;)

1 comments

If you haven't spent substantial amounts of time (personal estimate > 10 years) working with C++ writing production code , you certainly don't know C++.

Even if you did all that, odds are that you still don't know C++.

Ok, so I lied, I don't really know C++ because nobody really knows everything about C++. But I have written production C++ code (some of which is used by most of the people here, including you…) so ¯\_(ツ)_/¯. Anyways, this is veering off-topic, so if you or someone else would like to discuss your hiring woes and/or would like to test whether I really know C++ my email's in my profile; I'd be happy to talk to you there.
> If you haven't spent substantial amounts of time (personal estimate > 10 years) working with C++ writing production code , you certainly don't know C++.

Yeah this is part of the reason why I wont even try to learn the language

Don't let them scare you away from learning it; you can absolutely write C++ to a useful capacity in much less time than that.
Ah yes, the "No True C++ Developer" argument
That’s scaremongering. You may not know all of the syntax, but you can certainly write proper C++ code.
Avast was founded in 1988. Now imagine what its codebase looks like.
From experience, large/old software companies have their own rules what C++ is acceptable. A developer will take some time to learn that, but will then be able to blend in. Again, saying someone cannot write C++ after 10 years experience is nonsense.
That's not at all what I wrote though.

You can very well write something without really knowing it. In fact it's more than obvious that the majority of code written these days falls under that category.

Programming is hard and it takes years if not decades to "know" how to do it to an extent that's not harmful. This also applies to learning the tools. Some tools are easier to learn than others. C++ is notoriously difficult to learn.

You can write in a language even if you don't know it fully. C++ is a difficult case, because you have a historically rich syntax with even more richer modern syntax. But that doesn't mean you cannot write in the language, it just means you will focus on a subset that you do know. This is true about any language. Do you know about far pointers in C? Do you know all the intricacies of the Swift or Kotlin syntaxes? That does not mean you can't write software in these languages, or that you don't know them.

JavaScript isn't free of this at all, it's also a very complex syntax, due to many years of lumping more and more features without any coherent design. The tooling around JavaScript is notoriously bad and broken. Having to rely on package for basic stdlib functionality, having to understand how nested dependencies can and will collide, etc.—all of that creates much higher cognitive load than having to use C Lion or Visual Studio (not Code) for C++ development.

Apparently Microsoft, Google and Apple see it otherwise, hence their initiatives to improve C++ static analysers, lock down the use of C and C++ on their platforms with focus on safer languages, and even start making use of hardware memory tagging.