Rust for mission critical software

Discover how the Rust programming language is transforming mission-critical software by eliminating defects and vulnerabilities and why companies are racing to replace unsafe languages with Rust to prevent costly mistakes and ensure safety.

Chapters
0:00 Why should people care
1:04 Rust origin story
1:28 Mission critical software
3:18 Standards, qualifications and certifications
4:14 ADA
5:00 Alternatives to ADA
5:59 Rust's role in mission-critical software
8:12 My personal experience

[eineatombombe]

next up: WW2 wouldn't happen if Rust was around

[victorbjorklund]

Boeing wasnt just a software problem. The part that failed was the hardware (which you can argue the software should have accounted for) but more importantly it was an issue because Boeing didnt tell anyone about the software function. So pilots did not know the system was doing the "correction". If they had known about it they could have acted differently (or turned it off) and prevented the crashes.

[jenreiss]

i write finacial software in rust -- the loss of life when our code goes down is when the traders jump off buildings

[xofficial]

Rust programmers in funerals be like: He wouldn't die if he used rust

[RenderingUser]

Bro really loves retelling the elevator story

[dezly-macauley]

Rust is my favourite language because it makes me spend time thinking about the future implications of what I am doing as I continue to build. Rather than spending hours trying to debug crap later.

You can also refactor with that reassurance that you didn't overlook or break something.

[MrMediator]

As avionics software developer I would very like to use Rust in my job, but it would be very difficult to push through certification authorities. We even have to perform tests on compilers themselves in some cases

[aenguswright]

On the subject of the Boeing 737 Max, the problem wasn't a software defect. The software acted exactly as it was designed to. It was the specification decided on by the designers at a much higher level than the software engineers which killed all those people.

[TimothyWhiteheadzm]

The Boeing MAX issue was not due to bugs in the software, it was due to poor design. The language won't help you there. It was exacerbated by Boeing hiding how it was supposed to work from the pilots for regulatory reasons (to save costs).

[andrewdunbar]

If this video were made in Rust it wouldn't have the bug claiming the those Boeing crashes were due to software faults.

[sohpol]

Boeing 737 MAX crashes were NOT due to software. Why people related to software keep repeating this untrue statement?

[shubhamkukrety]

Hats off to the hard work put into the video. Some barely noticeable ambient music, and I'll go all gaga!

[theunrealtarik]

I think we should use Javascript to write airplanes' software

[EduardoEscarez]

While I like the idea of Rust being use in mission critical software, I have to say about the videos than neither the 737 Max nor Knight Capital disasters where the result of software bugs.

In the case of the 737, it was two issues: First, the MCAS system relied in a single Angle of Attack (AoA) indicator to operate, against the recommendation of using both present in the plane, so when that sensor was faulty it would provide incorrect information to the MCAS. Second, pilots where not informed about that system, their behavior and how to act in case of an emergency; all in an attempt to reduce training times.

In the case of Knight Capital, it was an implementation error due to the use of repurposed flags of old unused but still present software that cause unpredicted market execution actions that cause the bankrupt of the company.

About Therac-25's accidents, that was probably a software bug due to improper design but a contributor factor was that the software was repurpose in a different system with different behavior.

In the two first cases neither Rust nor any other programming language would have caught the problem because it wasn't a software bug by itself; in Therac-25's probably it would have been useful but I have some doubts.

[AviatorXD]

Wake up babe, new Rust propaganda dropped

[Jdinrbfidndifofkdndjoflfndjdk]

Wait... Didn't the 737 Max 8 crashed because of faulty sensor and the lack of training to turn off the trim when that happened?

[Cygx]

I think the mcas Boeing bug would have still happened if it was written in rust…

[davec]

Can we be clear about the Boeing thing? Cost cutting and deregulation caused that...

[morethanmello]

I was previously an auto technician, currently learning IT fundamentals as well as python. But what really interests me is cloud security for over the air software updates in vehicles. I've worked on a couple cars that required these updates, and could see the draw backs in such a system. That being said I was iffy on learning rust due to its complexity, but after the Microsoft kernel announcement, white house papers and this video. I'm thoroughly convinced I need to learn rust ASAP. Thank you for your help and effort in this video.

[TheVonWeasel]

I don't think Rust would have fixed a single one of those examples haha