On: “Openntpd is not vulnerable.”

[justincormack]

OpenBSD has none of those languages in the base OS; given they won't update gcc or switch to clang, Lua is the only one that they could support (NetBSD has it in base) but there is not a lot of system software written in Lua (alas). It doesn't have a depth of libraries that Go does. JavaScript would probably never pass review, so Rust is possibly a future option, unless a system programming community springs up around Lua.

[comex → justincormack]

FWIW, the default Go compiler doesn't depend on GCC or Clang, and doesn't do as many optimizations which could be dangerous or buggy, which I gather is the main problem with adopting LLVM?

(I don't have much experience with Go, though.)

[djmdjm → comex]

AFAIK neither Rust nor Go supports all the platforms that OpenBSD runs on.

[justincormack → comex]

The default compiler only supports x86, amd64, arm, so would need support added for mips, ppc, etc etc.

[Tobu → justincormack]

Rust needs LLVM for code generation. Realistically they could only trust an interpreted language like (non-jit) Lua.

Or they could adopt ZeroVM/NaCl, which would shift the balance towards compiled languages again.