2 ms·
Yet all of these are about 100x better than the cowboy attitude 99% of developers these days have. So I'd say that every time you come across a blog post extoll
by tensor 9y ago
Yet all of these are about 100x better than the cowboy attitude 99% of developers these days have. So I'd say that every time you come across a blog post extolling the virtues of formal proofs, verifications, and static typing, you should listen.
Because you are awful at programming, and security, and these things will help you. Sure, they won't be enough, but to think they are anything other than minimum requirements for security is being incredibly arrogant and deluded.
- dmitriid 9y agoI totally agree with you. There are just too many articles and blog posts that read like "formal proofs and/or static types are end of all need for anything like tests be cause while the program is verified and/or compiled, it's correct". As programmers we are always somewhere in the middle :)