3 ms·
I find that subject line completely terrifying. Please use a small trusted compute base, hopefully with rigorous auditing and attempts at formal modeling, for
by kev009 9y ago
I find that subject line completely terrifying. Please use a small trusted compute base, hopefully with rigorous auditing and attempts at formal modeling, for safety critical systems. The Linux kernel development process is not suitable for this domain.
- reificator 9y agoAgreed. I use a lot of Linux, but if things go wrong the losses are financial and temporary. I can't imagine trying to design a system that must never fail on top of Linux. Reliability is rarely served by addition.
- mechatronix00 9y agoI’ve read SpaceX uses Linux to fly Falcon and Dragon. If true, I wonder how they got happy with it for safety critical tasks. Or maybe those safety critical tasks get offloaded to microcontrollers with easier to audit codebases. edit: reference to the article- https://lwn.net/Articles/540368/ https://lwn.net/Articles/540368/
- ficklepickle 9y agoI would have thought they'd use Dragonfly BSD. Get it!?! Dragon FLY... 'Cuz it flies... I'll show myself out.