4 ms·
Honestly I wish instead of the Therac-25, we were discussing a system which made use of unit testing and defensive coding, yet still failed. That would be more
by 0xDEAFBEAD 1y ago
Honestly I wish instead of the Therac-25, we were discussing a system which made use of unit testing and defensive coding, yet still failed. That would be more educational. It's too easy to look at the Therac-25 and think "I would never write a mess like that".
- roeles 1y agoOne instance that crosses my mind often is the airbus a320 incident at Hamburg in 2008. Everything was done right there, but the requirements were wrong. Despite all the procedures and tests, the software still managed to endanger the lives of the passengers.
- 0xDEAFBEAD 1y agoInteresting, do you happen to have a case study?
- deleted 1y ago[deleted]
- shmeeed 1y agohttps://skybrary.aero/sites/default/files/bookshelf/1258.pdf https://skybrary.aero/sites/default/files/bookshelf/1258.pdf
- I_dream_of_Geni 1y agoSpeaking of Airbus, They 'lost' 3-4 different aircraft (from 1988 to 2015) which crashed during development, or, spectacularly during their first airshow. Never slowed down their customers at ALL, and to this day, Boeing has never lost one new commercial airliner in those same circumstances. Yet, Boeing gets all the hate. smh
- Izkata 1y agoThe Boeing 737 MAX had an additional safety feature that was causing crashes due to bad input from the sensors, that pilots didn't know about so they couldn't override. This was 2018 and 2019. After the first crash, the manuals and training were updated to explain what was going on and how to override it. https://en.wikipedia.org/wiki/Maneuvering_Characteristics_Augmentation_System https://en.wikipedia.org/wiki/Maneuvering_Characteristics_Au...
- hinkley 1y agoI bring up Knight Capital every time people start acting like feature toggles will solve every problem we have with feature rollout. KC lost over $400 million in less than an hour due to an old feature toggle and a problem with their deployment process.
- jopsen 1y agoI'd agree, it's super easy to think such errors won't happen had they just used a fairly safe language and sane architecture. Or unit test, race detectors, etc. I suspect that few organizations that do all that, have a process/culture of ignoring bugs in the wild -- and those that do have such complicated domains that explaining the error is hard. Software best practices today would probably also involve sending metrics, logs, error reports, etc. That said, it's still extremely easy get embrace a culture were unexplainable errors are ignored. Especially in a cloud environment.
- jldugger 1y agoPerhaps this is why the cover of my software correctness book in undergrad used a series of stills from the arianne-5 disaster[1] for the cover. [1]: https://en.wikipedia.org/wiki/Ariane_5#Notable_launches https://en.wikipedia.org/wiki/Ariane_5#Notable_launches
- wat10000 1y agoThe lesson is not to write a mess like that. It might seem obvious, but it has to be learned.
- kccqzy 1y agoSoftware engineering has advanced in the past few decades that the kind of code considered a "mess" has expanded.
- wat10000 1y agoWe’ve invented entirely new ways to write bad code.
- 0xDEAFBEAD 1y agoExamples?
- wat10000 1y agoDependency managers, Agile, Electron, AI, Java.