Charlie StrossPsst: Microsoft's suicide note just dropped
https://mastodon.social/@Migueldeicaza/115770620333626312
https://mastodon.social/@Migueldeicaza/115770620333626312
Matt Blaze@cstross @Migueldeicaza Not to mention that if you’re going to *algorithmically* translate unsafe C/C++ code into a safe language, what you’ll get (if it works correctly) is all the unsafe aspects of C, but simulated in a safe language. So now it will be both unsafe and unreadable.
@cstross @Migueldeicaza But I guess we can just count on the AI part to fix that.
Steve Bellovin@mattblaze @cstross @Migueldeicaza A few weeks ago, I saw a presentation of some of the conversions, and it was shockingly good. I'm sure, of course, that they picked the best stuff to show off, but it was still impressive: idiomatic Rust rather than what I refer to as a transliteration of the C into Rust (and which is what you're rightly objecting to). (DARPA has a whole project on such translators; @dwallach, I think, is running it.)
@SteveBellovin @cstross @Migueldeicaza @dwallach I have no doubt there are a bunch of very interesting research projects in this space, which is precisely why the idea of applying this to a major production system terrifies me.
Dan Wallach@mattblaze @SteveBellovin @cstross @Migueldeicaza
DARPA's TRACTOR (for which I'm the program manager) is focused on C to Rust, not C++. The Microsoft effort is unrelated to our effort.
TRACTOR performer teams have been rolling for about six months, and their first engagement with our test & evaluation team is going on now. As soon as it's ready, we'll push everything out for public release.
There are many challenges with code translation: correctness, idiomaticity, performance. And there are many approaches. By the time TRACTOR is done, which will take several years, we'll hopefully have good answers and good tools.
(I could spend hours just on the topic of "C programmers do the darndest things", where it's sometimes unclear why something even compiles, much less what it's suppose to mean.)
Why not C++? First we need to show we can do C, since (approximately) every valid C program is also a valid C++ program.
Adam Shostack 
@dwallach @mattblaze @SteveBellovin @cstross @Migueldeicaza I mean I’m uhh curious why you could do a million lines a month but not 100 million. What’s the human in the loop nominally doing?
JonI'm pretty sure Galen's project is a research project too.
And agreed about "C programmers do the darndest things." Back when I was working on the PREfix static analysis tool, one of the things we checked for potential divide-by-zero errors. Occasionally we'd see people literally using the constant 0 as a denominator ... and there was always a good story behind why they did it that way.