3 ms·
We have all our code inspected and pen tested under different regulations and certification rules; if you would take that even a bit broader, no software would
by tluyben2 10y ago
We have all our code inspected and pen tested under different regulations and certification rules; if you would take that even a bit broader, no software would be written anymore; all programmers would be busy checking code.
And this software is not 'that' critical (financial). I would actually agree that life or dead software should be checked line by line by experts, software and well described processes. I would even insist that critical software that can be formally verified should be formally verified. But for a broader range of software this is not possible and well, I don't think it should be needed for innocent software like, say, games.
What could work for non critical software is having to pay for bugs if software is faulty based on the severity of the bug. I would be very much against the kind of liability that involves again kind of indirect damages, so the maximum of damage is limited to what you paid. Most people do not want that but you would want to have some or all money back in case of neglect (bugs that do not properly get fixed) without forgoing your license. That will kill companies (if turned back the clock with this rule, MS + Oracle notably) but then again, they won't cut corners like what happens now.