People in the industry would instantly recognize that there are many layers to a big system and some are less critical than others. There is no proof here that the contractor touched any critical flight system software. But this is written for a general audience who are unable to tell the difference. The piece rides on the narrative that Boeing was careless, which may be true overall wrt 737MAX, but not necessarily i…
These planes run over $50 million each, and even a misprogrammed galley oven could potentially bring down a plane in flight. Given that, would you be happy that they outsourced any engineering in this way?
Boeing's 737 Max Software Outsourced to $9-an-Hour Engineers
21–30 of 31 posts
Re: Boeing's 737 Max Software Outsourced to $9-an-Hour Engineers
#22The real kicker is that the software worked exactly as intended. It wasn't the programmers' fault that the planes went down. It was the specs they were given that were bad.
Anyone that has ever worked with outsourced developers knows the truth of this. If you give them a spec or requirements, they will do exactly what that thing says. Even including the typos or grammatical errors. I don’t blame them. They have no incentive to care beyond this type of business transaction. But applying this model to anything other than vaporware is terrifying.
When you have software that interacts with other software, you follow the spec because you know the spec is going to be followed by the other parts, and that you should not get imaginative when human lives depend on your software working correctly.
The MCAS incident shows software that worked as expected, based on a spec that had incorrect and missing information and pilots that didn't have the information to understand the erroneous behavior. Also, the motors that actuate the trim wheels exert so much force that the pilots weren't able to counteract their action.
Re: Boeing's 737 Max Software Outsourced to $9-an-Hour Engineers
#23The real kicker is that the software worked exactly as intended. It wasn't the programmers' fault that the planes went down. It was the specs they were given that were bad.
Anyone that has ever worked with outsourced developers knows the truth of this. If you give them a spec or requirements, they will do exactly what that thing says. Even including the typos or grammatical errors. I don’t blame them. They have no incentive to care beyond this type of business transaction. But applying this model to anything other than vaporware is terrifying.
Re: Boeing's 737 Max Software Outsourced to $9-an-Hour Engineers
#24Earlier quoted context omitted.
> Because it is impossible to formally specify all possibilities that can happen, and noone can forecast all the desired specs before the thing is built and tested in real. Is that so? Wouldn't it be in theory possible to verify it against our current understanding of all laws of physics and the corresponding equations?
It also has a user interface. Are you saying it's possible to formally quantify human behaviour as well?
If that were not verifiable, then no program would be.
Re: Boeing's 737 Max Software Outsourced to $9-an-Hour Engineers
#25Earlier quoted context omitted.
If so, this may be a good back-to-reality counter-example for all the over-zealous formal proof enthusiasts. There is an old paper from 70's by people who designed complex systems where they stress the point that even if your system was designed and formally checked and if it obeys all the known rules and specifications, it will still fail in real world unless you test and iterate it a lot. Because it is impossible t…
> Because it is impossible to formally specify all possibilities that can happen, and noone can forecast all the desired specs before the thing is built and tested in real. Is that so? Wouldn't it be in theory possible to verify it against our current understanding of all laws of physics and the corresponding equations?
Re: Boeing's 737 Max Software Outsourced to $9-an-Hour Engineers
#26Re: Boeing's 737 Max Software Outsourced to $9-an-Hour Engineers
#27People in the industry would instantly recognize that there are many layers to a big system and some are less critical than others. There is no proof here that the contractor touched any critical flight system software. But this is written for a general audience who are unable to tell the difference. The piece rides on the narrative that Boeing was careless, which may be true overall wrt 737MAX, but not necessarily i…
These planes run over $50 million each, and even a misprogrammed galley oven could potentially bring down a plane in flight. Given that, would you be happy that they outsourced any engineering in this way?
Given, how many admin tools are built for simple SaaS apps, a project such as a new airplane will have a ton of tools that are built purely for the development cycle, most of them running offline or in the lab.
Re: Boeing's 737 Max Software Outsourced to $9-an-Hour Engineers
#28The real kicker is that the software worked exactly as intended. It wasn't the programmers' fault that the planes went down. It was the specs they were given that were bad.
If so, this may be a good back-to-reality counter-example for all the over-zealous formal proof enthusiasts. There is an old paper from 70's by people who designed complex systems where they stress the point that even if your system was designed and formally checked and if it obeys all the known rules and specifications, it will still fail in real world unless you test and iterate it a lot. Because it is impossible t…
You cannot exhaustively test software either - the number of cases to cover are beyond astronomical.
The effectiveness of both specification and testing ultimately depend on the same thing: thinking of all the relevant possibilities. If you overlook a possible failure mode, there's no guarantee it will be caught at any phase. The main benefit of formal methods, I think, is that the rigor tends to make such oversights visible.
the only people who think formal methods are a magic bullet are those who have not tried them. Likewise, the only people who think more testing (and especially unit testing) is a magic bullet are those who don't understand combinatorial complexity.
Re: Boeing's 737 Max Software Outsourced to $9-an-Hour Engineers
#29The real kicker is that the software worked exactly as intended. It wasn't the programmers' fault that the planes went down. It was the specs they were given that were bad.
I understand what you mean but no tester/developer worth their salt should say or hide behind this. Sadly, too many do. The job of the tester is to go beyond just blindly testing the spec but to find and report faults, those that somehow were missed earlier in the chain. And oh, no idea how Boeing missed it but some Indian companies are just not worth the bother. HCL, TCS, Cognizant, Infosys included. But hey, they'r…
So these testers should have been test pilots? - because the interaction of MCAS and the difficulty in manual trimming was not going to be found until someone tried it in the air (there is considerable doubt as to whether simulators accurately model it.)
And if this was the tester's job, what was the job of the engineers at Boeing who decided on using MCAS to solve a problem, and those at the FAA who endorsed it?
Re: Boeing's 737 Max Software Outsourced to $9-an-Hour Engineers
#30Earlier quoted context omitted.
I understand what you mean but no tester/developer worth their salt should say or hide behind this. Sadly, too many do. The job of the tester is to go beyond just blindly testing the spec but to find and report faults, those that somehow were missed earlier in the chain. And oh, no idea how Boeing missed it but some Indian companies are just not worth the bother. HCL, TCS, Cognizant, Infosys included. But hey, they'r…
> The job of the tester is to go beyond just blindly testing the spec but to find and report faults, those that somehow were missed earlier in the chain. So these testers should have been test pilots? - because the interaction of MCAS and the difficulty in manual trimming was not going to be found until someone tried it in the air (there is considerable doubt as to whether simulators accurately model it.) And if this…