3 ms·
signers should be more careful about the code they sign in the first place I agree with your sentiment, but that's not going to happen.
by ktRolster 9y ago
signers should be more careful about the code they sign in the first place
I agree with your sentiment, but that's not going to happen.
- debatem1 9y agoI'm not sure why not. Some of the same groups that sign this code also do formal verification of other codebases, for instance FSBLs. It seems reasonable that they would try similar approaches on TZ code given the scarcity of fuses.
- AstralStorm 9y agoGood joke. There are layers of proprietary software where nobody can audit involved. Can you trust a single auditor ever too? Even an automated exhaustive verifier can be buggy... oot more importantly incomplete if parallelism is considered.