5 ms·
Almost no one grasps, or interested in, formal verification. It's difficult to get software devs to even do unit testing much less prove their compilers always
by 1letterunixname 3y ago
Almost no one grasps, or interested in, formal verification. It's difficult to get software devs to even do unit testing much less prove their compilers always produce correct code.
- uecker 3y agoI agree. From a technical point of view formal verification would absolutely be the right direction. I haven't given up hope. A long time ago, I was flamed to death for suggesting that reproducible builds are needed, today we almost have this.
- hackable_sand 3y agoThis sounds more like a business problem at odds with quarterly planning.
- IshKebab 3y agoHave you actually tried formal verification of software? It's extremely difficult. 99% of programmers will not be able to do it at all, and even for the elite who do know how to do it, probably 99% of programs are too complex to be formally verified anyway. Even if that were not true, it has absolutely nothing to do with supply chain security.