From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-1.3 required=5.0 tests=BAYES_00,INVALID_MSGID autolearn=no autolearn_force=no version=3.4.4 X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 103376,885dab3998d28a4 X-Google-Attributes: gid103376,public From: "Marin David Condic, 407.796.8997, M/S 731-93" Subject: Re: Ariane 5 failure Date: 1996/10/01 Message-ID: <96100112290401@psavax.pwfl.com>#1/1 X-Deja-AN: 186546241 sender: Ada programming language comments: Gated by NETNEWS@AUVM.AMERICAN.EDU x-vms-to: SMTP%"INFO-ADA@VM1.NODAK.EDU" newsgroups: comp.lang.ada x-vms-cc: CONDIC Date: 1996-10-01T00:00:00+00:00 List-Id: Ken Garlington writes: >Alan Brain wrote: >> A really good safety-critical >> program should be remarkably difficult to de-bug, as the only way you >> know it's got a major problem is by examining the error log, and >> calculating that it's performance is below theoretical expectations. >> And if it runs too slow, many times in the real-world you can spend 2 >> years of development time and many megabucks kludging the software, or >> wait 12 months and get the new 400 Mhz chip instead of your current 133. > >I really need to change jobs. It sounds so much simpler to build >software for ground-based PCs, where you don't have to worry about the >weight, power requirements, heat dissipation, physical size, >vulnerability to EMI/radiation/salt fog/temperature/etc. of your system. > I personally like the part about "performance is below theoretical expectations". Where I live, I have a 5 millisecond loop which *must* finish in 5 milliseconds. If it runs in 7 milliseconds, we will fail to close the loop in sufficient time to keep valves from "slamming into stops", causing them to break, rendering someone's billion dollar rocket and billion dollar payload "unserviceable". In this business, that's what *we* mean by "performance is below theoretical expectations" and why runtime checks which seem "trivial" to most folks can mean the difference between having a working system and having an interesting exercise in computer science which isn't going to go anywhere. MDC Marin David Condic, Senior Computer Engineer ATT: 561.796.8997 M/S 731-96 Technet: 796.8997 Pratt & Whitney, GESP Fax: 561.796.4669 P.O. Box 109600 Internet: CONDICMA@PWFL.COM West Palm Beach, FL 33410-9600 Internet: CONDIC@FLINET.COM =============================================================================== "Some people say a front-engine car handles best. Some people say a rear-engine car handles best. I say a rented car handles best." -- P. J. O'Rourke ===============================================================================