Safe and Secure: Ada 2012 https://www.adacore.com/knowledge/technical-papers/safe-and-secure-software-an-invitation-to-ada-2012/ (criticises C, many other languages have adopted some ideas, but the subtyping is elegant)
miniblog.
Related Posts
I'm intrigued to see that Google has quantified that new code is generally buggier and less secure than code that has existed in your codebase for longer:
What's your favourite file checksum when you don't need cryptographic strength?
md5sum is convenient (it's installed on most systems), but it was originally intended to be secure. I just want a fast content check.
(Or is sha256sum sufficiently optimised that it doesn't matter?)
SMS 2-factor authentication isn't super secure because it's too easy to call a phone provider and do a SIM swap.
It seems like a dedicated smartphone app is significantly better here? It's just as convenient for the user, but harder to compromise.