3 ms·

There is no basis for that assertion.

juskrey 10y ago
This is basic risk management. What matters is error survival, not absence of errors. Moreover, total absence of errors means accumulating dangerous risk. See NN Taleb, for example.
- bbcbasic 10y ago
  Sounds defeatist to me. Especially when we are not talking about literal moonshots, but backup and restore procedures. The IT equivalent of seatbelts.
  - throwaway2048 10y ago
    I think at this point, recognising that software and software deployments invariably have bugs/issues is just realistic. The only setups that are free of them, are setups where the problems havent been discovered yet.
shakna 10y ago
A well known library like curl, has had CVEs. A not known library that also addresses the same circumstances as curl might have none listed. Which would you prefer to use?
- bbcbasic 10y ago
  That's a cross purpose argument
- mondoshawan 10y ago
  The one with the CVEs because it has had eyes on the source enough to generate them. The devil you know and all that.
  - shakna 10y ago
    Exactly. They've made mistakes, and can recover from them. The other hasn't had that chance. Thus, try the first, as it is better tested in the world.
    - ysavir 10y ago
      That's very different, though. I trust the company/organization that had to fire an employee for a horrible mistake. They are going to be very careful with who they hire or let near the code in the future, and had much more to lose than a single person. But I don't trust the employee that was shown forgiveness for a horrible mistake. Some might learn to not repeat what they had done, while others learn that they can get away with things through the magical power of phrasing the situation in a positive light. And some might be mistake-makes-for-life. Not all people come out the other side stronger.
astrostl 10y ago
I see this play out with regularity in the board game hobby. Manufacturer A: perfect product. Manufacturer B: omits some pieces, expedites replacements. People will love and extol the amazing service virtues of B, not A.

This is basic risk management. What matters is error survival, not absence of errors. Moreover, total absence of errors means accumulating dangerous risk. See NN Taleb, for example.

bbcbasic 10y ago
Sounds defeatist to me. Especially when we are not talking about literal moonshots, but backup and restore procedures. The IT equivalent of seatbelts.
- throwaway2048 10y ago
  I think at this point, recognising that software and software deployments invariably have bugs/issues is just realistic. The only setups that are free of them, are setups where the problems havent been discovered yet.

shakna 10y ago

A well known library like curl, has had CVEs. A not known library that also addresses the same circumstances as curl might have none listed. Which would you prefer to use?

bbcbasic 10y ago
That's a cross purpose argument
mondoshawan 10y ago
The one with the CVEs because it has had eyes on the source enough to generate them. The devil you know and all that.
- shakna 10y ago
  Exactly. They've made mistakes, and can recover from them. The other hasn't had that chance. Thus, try the first, as it is better tested in the world.
  - ysavir 10y ago
    That's very different, though. I trust the company/organization that had to fire an employee for a horrible mistake. They are going to be very careful with who they hire or let near the code in the future, and had much more to lose than a single person. But I don't trust the employee that was shown forgiveness for a horrible mistake. Some might learn to not repeat what they had done, while others learn that they can get away with things through the magical power of phrasing the situation in a positive light. And some might be mistake-makes-for-life. Not all people come out the other side stronger.

astrostl 10y ago

I see this play out with regularity in the board game hobby. Manufacturer A: perfect product. Manufacturer B: omits some pieces, expedites replacements. People will love and extol the amazing service virtues of B, not A.