News for hackers. Stuff that matters.
Re:CrowdStrike accepting the PwnieAwards for "most epic fail... by wizzwizz4 on Sunday August 11, 2024 @04:34PM (#41219149)
> in those cases, the unit test might not catch anything because the spec is wrong!

That's why you have three different, independent parties design everything important thrice, and compare the results. I'm serious. If you're not convinced this is necessary, just take a look at https://ghostwriteattack.com/riscvuzz.pdf.

(Your other suggestions are also necessary, and I don't think that would be sufficient.)

Re:CrowdStrike accepting the PwnieAwards for "most epic fail... by eropple on Sunday August 11, 2024 @08:26PM (#41220215)
I think that's a great idea, and when I've been in a leadership role I've at least tried to have important things done at least twice. ;)

And you're right, I was pretty much just outlining what might be called "a good start".