High integrity computing is still not widespread enough, because unfortunely lawsuits and liability procedures aren't yet common, but they eventually will.
We only need a few more media star exploits landing across social media for goverments to finally act upon it.
That web app would have a process just like anything else.
It would be more expensive?
Certainly, yet the food joint down the corner also needs to oblige to safety regulations if it doesn't want to be closed down by health inspection, and yet they manage.
Hospitals have workflow and treatment guidelines for a reason, they aren't the same process in every single one, not even on the same region on the same country.
It is clear which side of the line each one of us is, so not worthile to discuss this any further.
Most business software isn't safety critical in any way. If you're arguing that we need a framework around things like "self driving" cars, then sure. There are already processes for software in medical devices.
I'm personally eating a steak from a restaurant that isn't inspected, the risk is low and any restaurant I'd go to for a steak relies on repeat customers. The incentives are aligned. Inspecting ground beef at the source makes sense, but that's a different matter.
Sometimes cheap has a quality all its own, to paraphrase and repurpose Napoleon.
For the same reason in any other kind of industry, when things don't work they get refunded, and when things go wrong people get sued.
Software shouldn't be a special snowflake in that regard, and because it currently is, that is what allows business to disregad quality and good software development practices.
Even 1 euro shops and street food joints have a minimal set of quality standards they must adhere to, or get closed down when not.
We only need a few more media star exploits landing across social media for goverments to finally act upon it.
That web app would have a process just like anything else.
It would be more expensive?
Certainly, yet the food joint down the corner also needs to oblige to safety regulations if it doesn't want to be closed down by health inspection, and yet they manage.
Hospitals have workflow and treatment guidelines for a reason, they aren't the same process in every single one, not even on the same region on the same country.
It is clear which side of the line each one of us is, so not worthile to discuss this any further.