4 ms·
Anything related to security should fail safe. Failure is not lack of rigour, it's from fundamentally flawed architecture.
by underwater 4y ago
Anything related to security should fail safe.
Failure is not lack of rigour, it's from fundamentally flawed architecture.
- jwr 4y agoThis begs for the famous quote: "When a fail-safe system fails, it fails by failing to fail-safe." (from the wonderful "Systemantics"). Yes, one should definitely try to fail safe. But managing your states and state transitions explicitly and carefully is a good way to avoid these kinds of bugs.