Re: OpenSSL development (Heartbleed)

[Alan Browne <alan.browne@FreelunchVideotron.ca>]

On 2014.04.19, 12:34 , Georg Bauhaus wrote:

> That Funding = Quality_Assurance is a repeatedly established
> belief in talking about the "software area", so the only thing
> one can honestly assume is that people are going to repeat it.

Look at avionics - where Ada is heavily used for DO-178B level A, B, C 
software.  The required software quality process is a major expense, and 
it is the least inspiring/interesting part of the whole for everyone 
involved (except the SQA people).

But it unquestionably leads to fewer bugs - esp. on changes to software. 
  It does not lead to fast.

So while Funding = Q_A may not be true as an absolute statement, real 
Q_A per requirements[1] requires funding - nobody will do it out of the 
goodness of their hearts or as a hobby or to polish the boss's apple. 
It's tedious stuff.

[1] legal requirement.

-- 
"Big data can reduce anything to a single number,
  but you shouldn’t be fooled by the appearance of exactitude."
      -Gary Marcus and Ernest Davis, NYT, 2014.04.07