[SystemSafety] Stupid Software Errors [was: Overflow......]

Andy Ashworth andy at the-ashworths.org
Mon May 4 23:02:46 CEST 2015


So safety critical software today is being developed by inexperienced personnel with little or no relevant training... I guess on the positive side, development costs are cheap :(

Sent from my iPhone

> On May 4, 2015, at 16:59, Steve Tockey <Steve.Tockey at construx.com> wrote:
> 
> 
> With the average age of developers being about 29 years old, maybe most aren't old enough. And many have no formal software education so even a discussion of such failures in a degree program would have little effect on the target population.
> 
> 
> 
> From: Mike Ellims <michael.ellims at tesco.net>
> Date: Monday, May 4, 2015 1:01 PM
> To: 'Andy Ashworth' <andy at the-ashworths.org>, "M.Pont at SafeTTy.net" <M.Pont at SafeTTy.net>
> Cc: 'The System Safety List' <systemsafety at techfak.uni-bielefeld.de>
> Subject: Re: [SystemSafety] Stupid Software Errors [was: Overflow......]
> 
> > With the established history of date/time roll-over issues, shouldn't any date be viewed with suspicion during design safety analysis appropriate defensive design measures put in place?
>  
> The question is why?
> I know this issue is documented in at least one book.
> Did any of the programmers/coder on this even know about previous examples?
>  
>  
> From: systemsafety-bounces at lists.techfak.uni-bielefeld.de [mailto:systemsafety-bounces at lists.techfak.uni-bielefeld.de] On Behalf Of Andy Ashworth
> Sent: 04 May 2015 13:55
> To: M.Pont at SafeTTy.net
> Cc: The System Safety List
> Subject: Re: [SystemSafety] Stupid Software Errors [was: Overflow......]
>  
> Why wait until testing? With the established history of date/time roll-over issues, shouldn't any date be viewed with suspicion during design safety analysis appropriate defensive design measures put in place?
>  
> Andy
> 
> Sent from my iPhone
> 
> On May 4, 2015, at 08:49, Michael J. Pont <M.Pont at SafeTTy.net> wrote:
> 
> Matthew:
>  
> “On the other hand I don't think we should loose sight of the fact that the Boeing 'bug' was found by running a long duration simulation, not by an airliner falling out of the sky. So perhaps thanks is due to the Boeing safety or software engineer(s) who insisted on a long run endurance test and who might have actually learned something from history?”
>  
> OK – but maybe next time we can ask them to do this testing before the aircraft goes into service …
>  
> Michael.
>  
> Michael J. Pont
> SafeTTy Systems Ltd.
> _______________________________________________
> The System Safety Mailing List
> systemsafety at TechFak.Uni-Bielefeld.DE
> 
> 
> 	
> This email has been checked for viruses by Avast antivirus software. 
> www.avast.com
> 
> 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.techfak.uni-bielefeld.de/mailman/private/systemsafety/attachments/20150504/6b29fd24/attachment.html>


More information about the systemsafety mailing list