3 ms·
>In fact, I thought these crash recovery systems had to be written by 3 different teams in 3 different languages or architectures, and only activate when 2 of t
by platinumrad 8y ago
>In fact, I thought these crash recovery systems had to be written by 3 different teams in 3 different languages or architectures, and only activate when 2 of the 3 signal true. Or there's some manufacturer that does avionic software like this, I forget who.
Redundant systems with majority voting are common, and this can include multiple implementations of the same spec, but I'm not aware of any manufacturer that intentionally uses three different languages or architectures.
- jimktrains2 8y agoI don't know about 3 languages, but https://www.fastcompany.com/28121/they-write-right-stuff https://www.fastcompany.com/28121/they-write-right-stuff implies that there is software written by at least two different groups running on the shuttle. I've also heard anecdotally that some train signalling and on-board control systems run software simultaneously in linuc and freebsd to oessen the chance of simultaneous memory faults. (I didn't get a chance to ask for more details or clarification.)