5 ms·
Comments like this make me think that you have never worked in a domain where safety is paramount (like avionics or medical technology). People who are develop
by dimitrios1 4y ago
Comments like this make me think that you have never worked in a domain where safety is paramount (like avionics or medical technology).
People who are developing in these domains are typically using a strict subset of c or c++ and running their programs through a process of formal verification.
As far as I am aware, rust has no specification to formally verify, and the formal verification tools are all out of date (because of the rapid pace of language changes) or lacking (for example Miri lacks the ability to consider all input values because it executes your code the same way as it would normally run)
- cjwoodall 4y agoThis key! The wealth of formal verification tools in the safety critical c and c++ world is very high. Those tools, not the compilers are what get validated during tool qualification. Ultimately it is about the formal verification, static analysis and dynamic analysis tools, as well as, traceable code execution, robustness tests etc. A formally verified rust compiler could really be a game changer, but until then, the tools do exist to write safe c and c++, but they are expensive and adherence is low outside of the places they must be used
- steveklabnik 4y agoFerrous Systems is “on the last legs” of qualifying the compiler for a few different safety standards. It is true that Rust is behind in these domains, but it’s only a matter of time.
- jppittma 4y agoMost people aren't. I understand the hype on one level. It's fun to do great work and build high quality things. OTOH, What most of the world needs is "good enough" work rather than great work.
- surfmike 4y agoI haven’t, and interesting to know that C++ is used there! I’m referring to systems software (operating systems, browsers, runtimes, backends) where formal verification is not normally used.