TIP: Click on subject to list as thread! ANSI
echo: rberrypi
to: THE NATURAL PHILOSOPHER
from: RICHARD KETTLEWELL
date: 2020-09-15 11:15:00
subject: Re: Spectre / Meltdown

The Natural Philosopher  writes:
> On 14/09/2020 14:01, Richard Kettlewell wrote:
>> Software is full of bugs.
>
> Yours may be.
> When writing embedded code you make sure it isn't.

If you have a way to guarantee zero bugs in any nontrivial software, the
industry will beat a path to your door. Given you apparently can’t even
recognize a SQL injection vulnerability, I don’t think there’s much
chance of that happening any time soon.

>> In a safety- and/or security-critical context,
>> you can’t just ignore them, you need to find them (preferrably before
>> someone else does), then recertify and redeploy the fixed software.
>>
>> Certification is a moving target, at least in my industry, I don’t know
>> about automotive. Same issues as above.
>>
>> Security is a moving target; attacks keep getting better. Same issues
>> again.
>>
>> And that’s before getting into changing customer needs, competitive
>> challenges, rebranding, ...
>
> In a car window winder?

Bit more electronics in a car than just a window winder. At any rate
I’ll be trusting druck’s understanding of the costs and lifecycle or
automotive software over yours.

--
https://www.greenend.org.uk/rjk/

--- SoupGate-Win32 v1.05
* Origin: Agency HUB, Dunedin - New Zealand | FidoUsenet Gateway (3:770/3)

SOURCE: echomail via QWK@docsplace.org

Email questions or comments to sysop@ipingthereforeiam.com
All parts of this website painstakingly hand-crafted in the U.S.A.!
IPTIA BBS/MUD/Terminal/Game Server List, © 2025 IPTIA Consulting™.