From: Leif Roar Moldskred on
In comp.lang.java.programmer Brian <coal(a)mailvault.com> wrote:
>
> Imagine driving by a house and seeing a car in front with
> this sign -- "Free car."

Imagine the cook at a soup kitchen storing raw and fried
chicken in the same container.

Or imagine a company giving out away a free game as a marketing
stunt and the game turns out to have been infected with a virus
that formats the users' hard-drives.

Or imagine the author of an open-source product not paying
sufficent attention and accepting a patch from a third party
which turns out to have included a backdoor, providing full
access to any system where the program is running.

--
Leif Roar Moldskred
From: Richard Heathfield on
Wojtek wrote:
<snip>
>
> So the decision to drop the century from the date was not only based on
> management but on hard economics.

It was common practice to take 6 bytes to store YYMMDD, despite the fact
that 5 bytes is easily sufficient to store CCYYMMDD.

<snip>

> And at the time Y2K was created it was not a bug. It was a money saving
> feature. Probably worth many millions.

No, it was a bug that wasted a byte and threw away data. And it's still
a bug - some of the "solutions" adopted by the industry just shifted the
problem on a little, by using a "century window" technique. That will
catch up with us eventually.

--
Richard Heathfield <http://www.cpax.org.uk>
Email: -http://www. +rjh@
"Usenet is a strange place" - dmr 29 July 1999
Sig line vacant - apply within
From: Nick Keighley on
On 11 Feb, 09:58, Michael Foukarakis <electricde...(a)gmail.com> wrote:
> On Feb 10, 6:54 pm, Seebs <usenet-nos...(a)seebs.net> wrote
> > On 2010-02-10, Michael Foukarakis <electricde...(a)gmail.com> wrote:

> > > Nobody knows how to build earthquake-immune buildings, yet engineers
> > > give certain guarantees. When those are failed to be met, (s)he is
> > > held liable. Maybe it's about time some "software engineers" were held
> > > liable for their unreliable code in the same way.
>
> > Why?
>
> > Do you have any evidence to suggest that this kind of liability is actually
> > reasonable, justified, and/or necessary?
>
> I am not an expert at law, so I cannot reason about justification or
> necessity. However, I do recall quite a few "mishaps" and software
> bugs that cost both money and lives.
> Let's see: a) Mariner I, b) 1982, an F-117 crashed, can't recall if
> the pilot made it, c) the NIST has estimated that software bugs cost
> the US economy $59 billion annually, d) 1997, radar software
> malfunction led to a Korean jet crash and 225 deaths, e) 1995, a
> flight-management system presents conflicting information to the
> pilots of an American Airlines jet, who got lost, crashed into a
> mountain, leading to the deaths of 159 people, f) the crash of Mars
> Polar Lander, etc. Common sense tells me that certain people bear
> responsibility over those accidents.

http://catless.ncl.ac.uk/risks


> How can anybody ignore this? Do more people have to die for us to
> start educating software engineers about responsibility, liability,
> consequences? Right now, CS students learn that an error in their
> program is easily solved by adding carefully placed printf()'s or
> running inside a debugger, and that the worst consequence if the TA
> discovers a bug in their project solution is maybe 1/10 lesson
> credits.
>
> I was exposed to the same mentality, but it's totally fucked up.
>
> > > That's absolutely right. But we can't sit and wait for software
> > > development to be refined on its own, we should probably do something
> > > about it. Collectively or whatnot.
>
> > I agree.  I just don't think that rants about liability or certification
> > are going to do anything.  Neither of those has a thing to do with learning
> > to write more reliable software.
>
> So what? We already know how to write more reliable software, it's
> just that we don't care.

From: Arved Sandstrom on
Leif Roar Moldskred wrote:
> In comp.lang.java.programmer Wojtek <nowhere(a)a.com> wrote:
>> And at the time Y2K was created it was not a bug. It was a money saving
>> feature. Probably worth many millions.
>
> Not really. Remember, you can pack 256 years into a single 8 bit byte if
> you want to, but in most cases of the Y2K problem people had stored a
> resolution of 100 years into two bytes -- quite wasteful of space.
>
> In some cases it came from a too tight adherence to the manual business
> process that was modeled -- remember the paper forms with "19" pre-printed
> and then two digits worth of space to fill out? Those got computerised
> and the two-digit year tagged along.
>
> In other cases it boiled down to "this is how we've always done it."

As to the first case, one large app I am familiar with is a J2EE
modernization of a legacy mainframe program. The business users, for
decades, have produced lots of paper, mostly for auditing reasons. All
the printed output has gone into folders. When the mainframe program was
written it included the folder concept, although the application
entirely did not need it. Even better, when the application was
modernized a few years ago, into J2EE, the developers at the time made
strong representations to business to leave the folder concept, and all
of its associated baggage, completely out. No such luck - it's still
there. The folder concept has to be maintained in the application,
maintained through transactions, all the book-keeping related to folders
is also duplicated in the application, and it's completely irrelevant to
proper functioning of the application. In fact it's completely
irrelevant period, but try selling that.

This kind of thing happens all the time, and it results from a failure
to identify and model the real business processes, as opposed to the
things that simply look like business processes. Back when they had
typewriters the folders made sense...like in the '60's.

AHS
From: Arved Sandstrom on
Leif Roar Moldskred wrote:
> In comp.lang.java.programmer Brian <coal(a)mailvault.com> wrote:
>> Imagine driving by a house and seeing a car in front with
>> this sign -- "Free car."
>
> Imagine the cook at a soup kitchen storing raw and fried
> chicken in the same container.
>
> Or imagine a company giving out away a free game as a marketing
> stunt and the game turns out to have been infected with a virus
> that formats the users' hard-drives.
>
> Or imagine the author of an open-source product not paying
> sufficent attention and accepting a patch from a third party
> which turns out to have included a backdoor, providing full
> access to any system where the program is running.

This is what I am getting at, although we need to have Brian's example
as a baseline. In this day and age, however, I'm not convinced that a
person could even give away a free car (it wouldn't be free in any case,
it would still get taxed, and you'd have to transfer title) and be
completely off the hook, although 99 times out of 100 I'd agree with
Brian that it's not a likely scenario for lawsuits.

With software the law is immature. To my way of thinking there are some
implied obligations that come into effect as soon as a software program
is published, regardless of price. Despite all the "legal" disclaimers
to the effect that all the risk is assumed by the user of the free
software, the fact is that the author would not make the program
available unless he believed that it worked, and unless he believed that
it would not cause harm. This is common sense.

I don't know if there is a legal principle attached to this concept, but
if not I figure one will get identified. Simply put, the act of
publishing _is_ a statement of fitness for use by the author, and to
attach completely contradictory legal disclaimers to the product is
somewhat absurd.

It's early days, and clearly software publishers are able to get away
with this for now. But things may change.

AHS