[Interest] List on moderation

Jérôme Godbout godboutj at amotus.ca
Thu Jul 16 16:26:08 CEST 2020


Hi,
I did some medial software for years, it's not the programing language that matter most, it's the safety check (checksum, permission, double check validation...) that really matter. Don't loose your time with obfuscation, it never end well. Ensure the system integrity is good is a better alternative. Qml for GUI did work very well for us, we still have to tests the application with edges case and validate the fallback and safety catch with automated testing, QA, real tester... You need to provide many safety check at runtime too to ensure nothing can go out of hand. 

here is a few systems I worked on:
https://bodycad.com/en/products#software
https://www.zimmerbiomet.com/medical-professionals/knee/product/ORTHOSoft-guidance-system.html
https://www.zimmerbiomet.com/medical-professionals/knee/product/iassist-knee.html

The last one if embedded talking to Qt application on the navigation system.
Qml should not contain the logic or the real business logic anyway, it's just the GUI layer (I can understand that it's tempting to move more stuff up there, since it make things very flexible, but it's better to keep this into C++ so that layer can have the objects handling).

To pass 510K or other regulation around the globe, you need to proof your robustness and error catching. You have to make sure any alteration to the software or hardware will not go unotice and the device should refuse to work then. This is making it's way to desktop application with those AppStore, PlayStore and Microsoft Store. The application get signed and validate. It's just common sense to avoid supporting altered behavior and avoid some hack problems.

Rest assure that any byte modification on those system will prevent the application to launch and display an error message. Double check and launcher must agree that the checksum and signature are still valid. It's the testing that validate the robustness not the lnaguage, you could have code it in any languge you wanted, some language are just easier to test and strongly typed language make it far easier but it's not impossible to have dynamic typed languages. It's hard to balance flexibility and robustness in software architechture.

Jerome

-----Original Message-----
From: Interest <interest-bounces at qt-project.org> On Behalf Of Christian Gagneraud
Sent: July 16, 2020 9:57 AM
To: Andy Shaw <andy.shaw at qt.io>
Cc: interestqt-project.org <interest at qt-project.org>
Subject: Re: [Interest] List on moderation

On Fri, 17 Jul 2020 at 01:02, Andy Shaw <andy.shaw at qt.io> wrote:
> The global moderation is only going to be for a very short period, and we will lift it because we do not want to prevent open discussion and so on, the intention is to make sure this stays a safe space for the community to interact and not feel afraid to be persecuted for their beliefs. Personal attacks on any individual or group of people will not be tolerated.

I have in the past talked rubbish here, I've been over the top and/or border line quite a few times, discussions then quickly turned 'sour'.
I remember being kindly reminded off-line to 'behave' and be open. I did appreciate these reminders, I needed them. And I do think this is the best way to move forward.

6 month ago i decided that Qml was the best UI solution for a project i was given (my first 'real' Qml project), I still think it was the right choice (Qml=UI, C++=logic), but i can clearly see the risks of abusing Qml/JS and the consequences of letting this go uncontrolled.

Qml, JS and C++ on safety critical systems (health, aeronautics, automotive, marine, autonomous & industrial systems, ...) is a very interesting topic. I hope we'll hear more about this, and I'm looking forward to reading *constructive* discussion on that topic - in the open.

Maybe someone could talk about Qt+QNX (that would change from VAX/VMS ;)), I remember some qt.io communication about instrument clusters & human health monitoring demos using Qt/Qml. Then there's the new Qt for micro-controller, etc...
Honestly, it is healthy to criticise, and even healthier to get proper counter arguments.

Thanks for giving details on what is going on. Rants are definitely not cool, but personal attacks are worse.

My 2 cents,
Chris.

A guy who's been on the other side of the fence.
_______________________________________________
Interest mailing list
Interest at qt-project.org
https://lists.qt-project.org/listinfo/interest


More information about the Interest mailing list