←back to thread

632 points xbryanx | 1 comments | | HN request time: 0.212s | source
Show context
mike_hearn ◴[] No.44531351[source]
To the NY Times: please don't say they died by suicide. The passive voice makes it sound like some act of God, something regrettable but unavoidable that just somehow happened. It's important not to sugarcoat what happened: the postmasters killed themselves because the British state was imprisoning them for crimes they didn't commit, based on evidence from a buggy financial accounting system. Don't blur the details of what happened by making it sound like a natural disaster.

Horizon is the case that should replace Therac-25 as a study in what can go wrong if software developers screw up. Therac-25 injured/killed six people, Horizon has ruined hundreds of lives and ended dozens. And the horrifying thing is, Horizon wasn't something anyone would have previously identified as safety-critical software. It was just an ordinary point-of-sale and accounting system. The suicides weren't directly caused by the software, but from an out of control justice and social system in which people blindly believed in public institutions that were actually engaged in a massive deep state cover-up.

It is reasonable to blame the suicides on the legal and political system that allowed the Post Office to act in that way, and which put such low quality people in charge. Perhaps also on the software engineer who testified repeatedly under oath that the system worked fine, even as the bug tracker filled up with cases where it didn't. But this is HN, so from a software engineering perspective what can be learned?

Some glitches were of their time and wouldn't occur these days, e.g. malfunctions in resistive touch screens that caused random clicks on POS screens to occur overnight. But most were bugs due to loss of transactionality or lack of proper auditing controls. Think message replays lacking proper idempotency, things like that. Transactions were logged that never really occurred, and when the cash was counted some appeared to be missing, so the Post Office accused the postmasters of stealing from the business. They hadn't done so, but this took place over decades, and decades ago people had more faith in institutions than they do now. And these post offices were often in small villages where the post office was the center of the community, so the false allegations against postmasters were devastating to their social and business lives.

Put simply - check your transactions! And make sure developers can't rewrite databases in prod.

replies(19): >>44531419 #>>44531429 #>>44531441 #>>44531521 #>>44531528 #>>44531663 #>>44531829 #>>44531922 #>>44531950 #>>44531986 #>>44531999 #>>44532057 #>>44532232 #>>44532622 #>>44532757 #>>44532759 #>>44533432 #>>44535081 #>>44538524 #
cedws ◴[] No.44531441[source]
>if software developers screw up

Well, yes, they did screw up, but the fallout was amplified 100x by bad management.

replies(3): >>44531543 #>>44532415 #>>44534970 #
mrkramer ◴[] No.44531543[source]
"The Horizon IT system contained "hundreds" of bugs[0]."

If your accounting software has hundreds of bugs then you are really in the deep shit.

[0]https://en.wikipedia.org/wiki/British_Post_Office_scandal#:~...

replies(7): >>44531604 #>>44531684 #>>44531831 #>>44531853 #>>44532648 #>>44533820 #>>44534107 #
PUSH_AX ◴[] No.44531604[source]
Well not really, no one should be committing suicide due to a buggy system. If you know the details of the case it was widespread but the post office decided to gaslight everyone and put people in debt and prison. That’s what caused this, the bugs were just a catalyst for shitty humans to do shitty things
replies(1): >>44531657 #
mrkramer ◴[] No.44531657[source]
Yea management failed but wouldn't the most logical thing be to call in computer forensics experts and quality test the software, reverse engineering it and try to catch the bugs. This wasn't the classic case of financial fraud, this was all about faulty software.
replies(2): >>44531701 #>>44531845 #
noisy_boy ◴[] No.44531845[source]
> Yea management failed but wouldn't the most logical thing be to call in computer forensics experts

Yea and who is responsible for engaging them?

replies(1): >>44531918 #
mrkramer ◴[] No.44531918[source]
I meant courts should've called in multiple expert witnesses and even computer forensics companies. This case looks like government or in this case courts colluded with British Post Office.
replies(1): >>44534179 #
1. mr_toad ◴[] No.44534179[source]
> I meant courts should've called in multiple expert witnesses and even computer forensics companies.

UK courts don’t (can’t) do that, that’s up to the plaintiffs or defendants.