Secure Coding mailing list archives
RE: How do we improve s/w developer awareness?
From: "Peter Amey" <peter.amey () praxis-his com>
Date: Mon, 06 Dec 2004 02:33:51 +0000
[snip]
Remember that little incident in 2000 when the London millennium bridge was closed immediately after opening due to excessive wobbling when people walked across it? I can't guarantee that my recollection is accurate, but I'm sure they were trying to put this down to that software classic, a 'Design feature'.
The Millenium Bridge wobble is indeed instructive. Engineering is usually a profession that is conservative and places great emphasis on codifying and learning from past mistakes. Much bridge design work uses well-established, trustworthy principles. The Millenium Bridge designers deliberately pushed the boundaries to produce something novel and exciting. Never before had a suspension bridge had the suspension and decking in the same plane (i.e. the deck doesn't "hang" from the suspension, its balanced on/between the suspension). The result was strong enough but had unexpected dynamics i.e. it wobbled! I am confident that this experience is already in the text books, standard data tables and CAD tools. The engineering body of knowledge had been added to and the problem should not recur. This is where the software community can learn: 1. We are appalling at learning from previous mistakes (other than in perfecting our ability to repeat them!) 2. We routinely push the boundaries of what we try and achieve by leaping instead of stepping. 3. We routinely adopt novel and untried technology in preference to proven and trustworthy alternatives. Indeed, mature technology often seems to be rejected precisely because it is not new, novel or exciting enough. The Millenium Bridge made news precisely because such engineering faiures are rare; software engineering failures make the news because they are so common the papers would be empty if they weren't reported! [snip] Peter ********************************************************************** This email is confidential and intended solely for the use of the individual to whom it is addressed. If you are not the intended recipient, be advised that you have received this email in error and that any use, disclosure, copying or distribution or any action taken or omitted to be taken in reliance on it is strictly prohibited. If you have received this email in error please contact the sender. Any views or opinions presented in this email are solely those of the author and do not necessarily represent those of Praxis High Integrity Systems Ltd (Praxis HIS). Although this email and any attachments are believed to be free of any virus or other defect, no responsibility is accepted by Praxis HIS or any of its associated companies for any loss or damage arising in any way from the receipt or use thereof. The IT Department at Praxis HIS can be contacted at [EMAIL PROTECTED] **********************************************************************
Current thread:
- RE: How do we improve s/w developer awareness?, (continued)
- RE: How do we improve s/w developer awareness? Gary McGraw (Nov 12)
- Re: How do we improve s/w developer awareness? Dana Epp (Nov 12)
- RE: How do we improve s/w developer awareness? Wall, Kevin (Nov 12)
- Re: How do we improve s/w developer awareness? George Capehart (Dec 01)
- Re: How do we improve s/w developer awareness? Brian Utterback (Dec 02)
- RE: How do we improve s/w developer awareness? Michael S Hines (Dec 02)
- Re: How do we improve s/w developer awareness? [Virus Checked] graham . coles (Dec 02)
- Re: How do we improve s/w developer awareness? der Mouse (Dec 02)
- Re: How do we improve s/w developer awareness? Brian Utterback (Dec 02)
- RE: How do we improve s/w developer awareness? Shea, Brian A (Dec 02)
- Re: How do we improve s/w developer awareness? David A. Wheeler (Dec 03)
- RE: How do we improve s/w developer awareness? Peter Amey (Dec 05)
- RE: How do we improve s/w developer awareness? Gary McGraw (Nov 12)