Aayush P.

Background

About Aayush P.

Engineer turned researcher working to improve correctness and safety in general-purpose programming. Why? Because patterns, frameworks, testing can only do so much. Anyone can program, not everyone can program correctly, as evident from vulnerabilities discovered in projects like chromium, curl, maintained by expert programmers. Correctness shouldn't be this hard. But, it is. How do we do better? Fix the legacy code. There's enough of it around that we can't think of safety by default as long as any existing code exists in its current, weakly typed, strongly coupled form (higher-level domain logic implemented in language/platform-specific low-level code). Newer languages (like Rust) just brush them under the unsafe carpet. Write new code better. Don't add on to the legacy pile. Use strongly-typed languages or better abstractions. Either approach requires more awareness efforts towards safe programming. Both approaches make the intent clear and ideally tie a scope to the intent. Tools to do that are lacking and have a good potential for improvement. My work involves doing a bit of both, but more of the first.