On 9/28/2014 11:08 PM, "Ola Fosheim Grøstad"
<[email protected]>" wrote:
It does not have to be known, it is sufficient that it is isolated or that it is
improbable to be global or that it is of low impact to long term integrity.
You cannot make such presumptions and then pretend you've written robust
software.
By your line of reasoning no software should ever be shipped, without a formal
proof, because they most certainly will be buggy and contain unspecified
undetected state.
You're utterly misunderstanding my point. Perhaps this will help:
http://www.drdobbs.com/architecture-and-design/safe-systems-from-unreliable-parts/228701716
