5 korrents from this piece
Every claim below was made in this piece, quoted word for word and numbered in the order the piece makes them, so you can read it there rather than take our word for it. The sentence above each quote is our reading of the claim, not their wording. Each quote was checked against a stored copy of the page at build time; where the two differ, the quote is the fact.
Their wordsmost people in high-assurance software don't use formal methods
Their wordsFinding the right spec is one of the biggest challenges in formal methods.
Their wordsFormal verifiers have a dilemma: the more expressive the language, the harder it is to prove anything in it. But the less expressive the language, the harder it is to write anything in it.
Their wordsIn fact, the vast majority of distributed systems outages could have been prevented by slightly-more-comprehensive testing.
Their wordsYou do not need full code verification to write good software or even to write near-perfect software.