News for hackers. Stuff that matters.
Re:Critical Update on DAO Vulnerability by adrianN on Friday June 17, 2016 @09:36AM (#11922540)
With enough effort, you can prove that your code conforms to the specification, but how do you prove that the specification conforms to your expectations?
Re:Critical Update on DAO Vulnerability by richardwhiuk on Friday June 17, 2016 @11:16AM (#11923122)
You struggle to even do that. You can normally prove that some code conforms to a version of the specification that is explicitly formalised, but in practice, a large number of bugs are specification bugs and that will only increase the more you are forced to formalise the specification.