4 ms·
> Agree that many safety-critical coding standards are a grab-bag of sometimes dubiously-valuable rules. What frustrates me is that most standards are self-awa
by nunuvit 3y ago
> Agree that many safety-critical coding standards are a grab-bag of sometimes dubiously-valuable rules.
What frustrates me is that most standards are self-aware of this and explicitly allow you to tailor them, but hardly anyone does that to a meaningful extent.
- munch117 3y agoDo that and you are just creating targets for the next security auditor that you need any sort of certification or approval from. In the end you'll choose the path of least resistance, which is to slavishly obey every rule on the checklist. It's not that people don't want to tailor the rules. They try at first, and then it gets beaten out of them. Frustrating indeed.
- nunuvit 3y agoIt's doable sometimes when there's a tailoring framework. Here's a publicly available example [1]. Though I admit that it's usually easier to do in the US than in the European Union, so your experience may vary. [1] https://www.nasa.gov/seh/3-11_tailoring_and_customization https://www.nasa.gov/seh/3-11_tailoring_and_customization
- peplee 3y agoI suppose I'm not surprised that this breakdown exists, I just didn't know it existed. Thank you for sharing.