News for hackers. Stuff that matters.

A comment on Kent Beck: “I get paid for code that works, not for tests” (2013). Parent comment

Re:Kent Beck: “I get paid for code that works, not for tests... by RandomOpinion on Thursday December 08, 2016 @11:42AM (#13131581)
>...device drivers...

I hope you're joking but I suspect you're not. Device drivers have the highest level of privileged access in many operating systems and code quality for drivers is so uniformly lousy (certain large vendors whose names begin with "N", "A", and particularly "Q", I'm looking at you) that attempting to break the drivers would be among the first things I'd consider if I were trying to root a device.

[ Parent | on HN ]
Re:Kent Beck: “I get paid for code that works, not for tests... by ryandrake on Thursday December 08, 2016 @12:08PM (#13131889)
Please see my other reply. I was addressing "unconnected software" not "software without attack surfaces". I agree that security is a concern with all software.
[ Parent | on HN ]
Re:Kent Beck: “I get paid for code that works, not for tests... by boomlinde on Saturday December 10, 2016 @01:37PM (#13147099)
Well, in a sense, a device driver can usually be thought of as very connected to a highly sensitive part of a computer system. If something goes wrong in a driver it will have a negative effect on the whole (monolithic) kernel and the rest of the operating system.
[ Parent | on HN ]