3 ms·
> Avionics famously has multiple independent implementations, and checks results between the units. We studied this at university and it turns out even indepen
by sroussey 7y ago
> Avionics famously has multiple independent implementations, and checks results between the units.
We studied this at university and it turns out even independent implementations tended to have the same errors. So it’s even more work than expected, and non-intuitively, they should be slightly less independent for that reason.
- FigmentEngine 7y agosource?
- nickpsecurity 7y agoIt was Nancy Levison with this article having a few links: https://leepike.wordpress.com/2009/04/27/n-version-programming-for-the-nth-time/ https://leepike.wordpress.com/2009/04/27/n-version-programmi... Levison's a brilliant, influential person in software safety: https://en.wikipedia.org/wiki/Nancy_Leveson https://en.wikipedia.org/wiki/Nancy_Leveson