Re: Ariane5 FAQ

[Berend de Boer <berend@xsol.com>]

>>>>> "Vinzent" == Vinzent Hoefler <ada.rocks@jlfencey.com> writes:

    Vinzent> That isn't much different from SPARK where you should
    Vinzent> justify such decisions for the verifier. I don't think
    Vinzent> either method would have helped, because nobody seemed to
    Vinzent> look at the requirements at all.

True. Didn't they have a system in place where people have to sign
certain things? I.e. a software engineer can sign that use of this
software is ok.

Ultimately someone decided to include a piece of Ariadne 4
software. And that someone didn't check the requirements. Either
because a software engineer recommended it (in which case he should
have checked it), or he was the software engineer.

And if people didn't know about the importance of requirements, it's a
telling sign at what state software engineering in general really
is. It just reminds me at the education in software engineering I got.

But fortunately, at the moment I'm really shocked when I see code that
has absolutely no conditions under which it is supposed to operate
(just trial and error, and looking at the source if you have it). But
unfortunately, most code/specs is still written this way.

-- 
Regards,

Berend. (-: