From mboxrd@z Thu Jan  1 00:00:00 1970
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00 autolearn=ham
	autolearn_force=no version=3.4.4
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 103376,15b0ab6fa90f819d
X-Google-Attributes: gid103376,public
X-Google-ArrivalTime: 2004-04-09 09:08:28 PST
Path: 
 archiver1.google.com!news2.google.com!fu-berlin.de!uni-berlin.de!62.164.182.251!not-for-mail
From: Peter Amey <peter.amey@praxis-cs.co.uk>
Newsgroups: comp.lang.ada
Subject: Re: "Tracking the Blackout bug"
Date: Fri, 09 Apr 2004 17:08:25 +0100
Message-ID: <c56hpq$2onduq$1@ID-69815.news.uni-berlin.de>
References: <mailman.228.1081490178.327.comp.lang.ada@ada-france.org>
NNTP-Posting-Host: 62.164.182.251
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
X-Trace: news.uni-berlin.de 1081526906 93042650 I 62.164.182.251 ([69815])
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US;
 rv:1.4) Gecko/20030624 Netscape/7.1 (ax)
X-Accept-Language: en-us, en
In-Reply-To: <mailman.228.1081490178.327.comp.lang.ada@ada-france.org>
Xref: archiver1.google.com comp.lang.ada:6913
Date: 2004-04-09T17:08:25+01:00
List-Id: <comp.lang.ada>



sk wrote:
> Article at "The Register" about the electricity blackout
> in the Northeast (USA) last year.
> 
> No directly relevent to c.l.a but interesting since it talks
> of race conditions etc. which are issues of Ada.
> 
> 
> http://www.theregister.co.uk/2004/04/08/blackout_bug_report/
> 
> 

Interesting read.  What I do find irritating are quotes such as

"The company did everything it could..."
"We text exhaustively..."
"Unfortunately, that's kind of the nature of software..."

All these statements are untrue and they also reflect a kind of 
defeatism that I wholly reject (imagine Boeing saying "OK, the wings did 
fall off, but we tested it a lot and anyway that is just the nature of 
aeroplanes").

The developers did NOT do everything they could.  They could have used 
the Ravenscar profile in Ada; they could use RavenSPARK; they could have 
done some model checking of the concurrent parts of the program.  They 
did NOT test exhaustively because it is impossible (/exhaustingly/ I am 
willing to believe).  And software doesn't HAVE to be cr*p!

sigh

Peter