3 ms·
As long as it crashes rather than breaking integrity, the integrity-maintaining code doesn't necessarily have to be stable.
by vertex-four 10y ago
As long as it crashes rather than breaking integrity, the integrity-maintaining code doesn't necessarily have to be stable.
- nickpsecurity 10y agoYou can't know it will do that unless you designed it to. The high-assurance kernels of Orange Book era often used that strategy where they'd run correctly or fail-safe. They had strong assurance they would in terms of design, specs, proofs, tests, etc. What you said applied to CochroachDB minus a good subset of such practices is "We hope it will crash instead of affect integrity." Different ballpark entirely. EDIT to add: Recall this played out in filesystems and regular databases where software errors could corrupt things. Now, just imagine same thing for distributed programming. Same or worse results from defects as always.