Y2.01K
After our recent discussion of decimal/hexadecimal confusion at the turn of 2010, alphadogg writes in with a Network World survey of wider problems caused by the date change. "A decade after the Y2K crisis, date changes still pose technology problems, making some security software upgrades difficult and locking millions of bank ATM users out of their accounts. Chips used in bank cards to identify account numbers could not read the year 2010 properly, making it impossible for ATMs and point of sale machines in Germany to read debit cards of 30 million people since New Year's Day, according to published reports. The workaround is to reprogram the machines so the chips don't have to deal with the number. In Australia, point-of-sales machines skipped ahead to 2016 rather than 2010 at midnight Dec. 31, rendering them unusable by retailers, some of whom reported thousands of dollars in lost sales. Meanwhile Symantec's network-access control software that is supposed to check whether spam and virus definitions have been updated recently enough fails because of this 2010 problem."
Didn't I hear this before? I remember people talking about scamming banking systems via the confusion caused by 2010.
Does anyone remember this well enough to dig up the article?
Thanks (and lazy),
Todd
Omne ignotum pro magnifico.
How on earth can things like this happen? After the Y2K debacle how can anyone
not anticipate and extensively test for future dates?
Is this sheer utter incompetence, or just a total lack of intelligence?
Yee Gods!
Three Squirrels
Crisis? There was a crisis? Other than one invented by scam artists and the media?
Yes, exactly that crisis. And that was crisis enough
Us programmers always get the negative press.
Long live the BSD license
Y2K ended up being a lot less scary than it could have been. Most of that is because we were prepared, turned a lot of systems off during the rollover, and then brought them back up under close monitoring.
The end result is that the populace, including business decision makers, hear about more date-related tech problems and think "Eh, it won't be that big of a deal. Y2K wasn't that bad, right?"
And now, an obligatory XKCD reference: http://xkcd.com/607/
Several years ago - might've even been last decade - I wrote a flash movie that checks the version number of the flash player and informs you if you need an update. And guess what? It still works fine.
That was Flash 4, I believe. Somehow due to my great forethought it was able to cope with Flash 10 without spazzing out.
Whenever I do dates, and am not using long (for miliseconds), I usually put the year in as int. I guess that means I should be set until 2 billion years or so?
Well, to be fair to the morons that coded this stuff - I'm coding in scripting languages on desktops with near limitless processing power. These devices that are messing up are probably 8-bit MCUs, where quite possibly 100% of the code is ASM. I suppose it's a bit harder to debug or think ahead because of that.
*sigh*
http://news.cnet.com/8301-13860_3-10425455-56.html
this is affecting me and the other 3 guys on the planet with a Windows Mobile phone, too. :(
Geez! Intel introduced MMX Technology to take care of this problem in 1996! Get with the times!
January 1st our 15 year old security badge system started marking all badges as invalid. Couldn't fix it until we rolled back the system date.
Programmer: "I want to take some time to refactor some of the older code."
MBA: "What's the ROI on that?"
Programmer: "DIAF."
Playing wii new years eve. The thing hard crashed exactly as the year changed (it was in the menu not a game). After a reboot it was fine.
Is "network-access control software" the new term for a firewall? Even so, Symantec Endpoint Protection is primarily an anti-virus, with the usual additional features, as well as some enterprise ones like "device control" for pesky flash drives. It was an all-new product back in 2006. Although the problem only interferes with the reporting, and not the function of its management console, I think it's quite embarrassing.
Spamassassin in Kerio Mailserver has a bug that flags all messages dated 2010 as spam. I think it affects the normal spamassassin as well.
I don't have points at the moment, but well done.
When I booted it the next day the hardware clock thought it was 1987, and it couldn't mount the filesystem. In the console I eventually got to I found all my stuff was fine and the filesystem was mounted, but the firmwarewasn't seeing it. I manually the hardware clock and it hasn't had any problems since.
I was in the field when it happened, so the whole thing scared the shit out of me. I shudder thinking of what will happen come 03:14:07 UTC on Tuesday, 19 January 2038.
I did Y2K remediation. I've seen it called a waste of resources and that because nothing happened, nothing would have happened. This is the smallest taste of what would have happened if Y2K weren't addressed. Only we would have had airliners fall from the sky (silly? Military jets had all navigation crash when crossing the date line, and if not for a tanker with them and that communications worked when navigation failed, they would have crashed). But with a lot of hard work, it was a non event.
Though, if anyone could tell me why my power went out at exactly midnight on that night, I'd love to know. The Preston Hollow neighborhood in Dallas did have a power failure right at midnight. And I never could figure out what happened. But all the equipment I was responsible worked flawlessly.
Learn to love Alaska
I live in Germany and didn't notice a single problem with our cards. Granted we replaced ours a couple months ago due to another issue.
I think the proper way to denote year 2010 is Y2K01, just like 14K4 was used for 14400.
Of course writing Y2K01 or Y2.01K is more difficult than Y2010, so why bother using that arcane notation.
With all the hype of y2k, you'd think that would be enough to push people into action and learn how to handle dates correctly... Instead, some people "fixed" y2k problems with another series of short sighted dirty hacks that are now starting to break again after only 10 years.
http://spamdecoy.net - free throwaway anonymous email - avoid spam!
Is this some kind of job security feature?
I mean, what idiot programs a number field to be ambiguously hexadecimal or decimal? Of course you'll be screwed as soon as you leave the single digits.
Last year I had my Garmin GPS's traffic module enabled for a year 'subscription', which is effectively a code that tells the unit 'enable yourseilf until xxx date'. It expired a few months ago. Now, come Jan 1st, 2010, its magically back on without any reactivation. Not sure if I want to tell them straight away, I, and many others I'm sure, just saved $70 by their programming error.
Slashdot: Where opinions are just opinions until you have mod points.
2038 bugs are already here - I ran foul of OpenSSL failing valid crypto certs with end dates past then last year (now fixed)
All the parking ticket dispensers in copenhagen also bugged out. http://translate.google.com/translate?js=y&prev=_t&hl=en&ie=UTF-8&layout=1&eotf=1&u=http%3A%2F%2Fwww.berlingske.dk%2Fkoebenhavn%2Fparkeringsautomater-afviser-dankort&sl=da&tl=en
Yes there was a crisis. If the effort that was put in, hadn't been put in a huge number of important systems would have failed in Y2K.
The UK emergency services number (999) was one that would not have worked had we not spent the time upgrading and patch the systems and software it depended on.
Sadly, because there was no disaster, because the work was done to prevent it, people think there wasn't a problem. I suppose we should have left the 999 service. People would have died and we could have pointed to it as an example of the Y2K bug. I think we'd probably have been sued for not fixing it beforehand though.
You may think me a tired, old, cynic. I'd have to disagree about the tired bit.
How about MMX? I like confusing other people by reusing acronyms. Even better if I could walk around with a slot 1 Pentium and wave it in front of IT staff while mentioning it...
You'd certainly confuse people doing that. Early Pentium IIs used a slot, Pentiums used sockets.
I'd be willing to bet that some of this has been caused by, "just change it so that if the year is 10 then assume it's 20??, we'll fix it properly before then".
Y2.01K? That's surely a plot of the hard disk industry.
Everybody knows that Y2010 are only Y1.963K.
Incredible that we're still keeping this outdated Gregorian Calendar instead of a Perpetual Calendar that would solve all these idiotic fiddling with complicated date mechanisms.
http://www.transparency.org
An apparent requirement was to squeeze the year into a single byte. They just did it very badly by choosing BCD format for the last 2 digits of the year, and assuming every new CS grad would know what that means, and would understand by examining the existing data field where 0x03 was present for 2003 and 0x04 was present for 2004 that it must be in BCD. Since BCD and plain binary share the same values for 2000 through 2009, it fully depended on the programmer reading AND UNDERSTANDING the documentation to get it right ... if the documentation even reliably pointed this out.
We need to get away from BCD encodings. It was convenient for hardware level protocols because they allowed displays of decimal digits without further conversion. Do we do that anymore? Unlikely. We have software or firmware, and that can do decimal conversions just fine. All NEW communications protocols should from this day forward use only one of a binary format with a documented resolution and sufficient bits to last until at least the year 2200, or characters with the date in a format with year first, month next, and day of month after that, or a plain decimal count of days since the epoch. Where an epoch is needed, it must be clearly documented.
now we need to go OSS in diesel cars
We also had an issue where something stopped working on 2010-01-01 because it was so far off in the future that it wouldnt matter. When was this code written? 2006! On the other hand the dev responsible no longer works here so the Make-It-Someone-Else's-Problem method worked perfectly...
If you don't risk failure you don't risk success.
This is not about a 2010 problem. This is about incredible stupid programmers / hardware designers.
Should this story be merged with the story about the lack of work ethic in the software industry?
I work for a software company that's been in business since 1978. The product I work on is a real-time pharmacy benefit adjudication system, so it has to be up 24/7. They had one guy do Y2K fixes back in '99, and he retired last summer without telling anyone his Y2K "solution" was to just add 100 to any data containing a year. With the way this software works, that was fine--until 2010. Something tells me the timing of his retirement wasn't coincidental! It wasn't hard to fix, but some people took really absurd shortcuts fixing Y2K bugs, when there are plenty of ways to do it that are just as simple and won't break after 10 years.
Check out my world simulator thingy.
SunPCi cards are essentially x86 PC blades designed to be plugged into a PCI slot on a Sun SPARC machine. I use a SunPCi III in the Sun Blade 1500 (SPARC desktop) I have on my desk to run software I have to run that requires Windows. This Monday, I fired it up and got told by the driver software that my system date was in the future because "I can't believe it's really" 2010 (the exact words of the error message!). Looking at the Sun forum message traffic, apparently *everybody* with a SunPCi III card is getting this. Sun's supposed to be working on a patch now. Right now the only workaround is to set your system clock back to 2009 when you fire up the SunPCi card (you can set it back to correct after it starts).
SEP11 has a rather stupid bug that causes it to not update its virus-definition datestamp past 20091231. The definitions continue to be updated, but the program complains to the user that it's out of date, and so they panic and bother us until the dumbass Symantec engineers get around to fixing whatever the bug is.
Hail Eris, full of mischief...
E pluribus sanguinem
Okay, admittedly, there may be a few machines still running *NIX but... but that's really a long, long, LONG way off.
~Hal
Prior to "Y2K", I saw far too many mediocre "consultants" make more money than God by spreading FUD about the possibility that your software would 'esplode on midnight 1/1/2000. Were there systems that would be affected? Sure. Back when storage and memory cost money, the amount of space used by data was an issue that could not be ignored, and that led to decisions in system design that caused the issue. Heck, who thought that any single piece of software would still be relevant 20 years after it was written? But, so-called experts came out of the woodwork to "help" businesses through the non-crisis by charging them huge rates.
But, to have this really happen on "modern" systems seems unacceptable to me. I half expect to see another new breed of "expert" consultant who specializes in reviewing all of your code to make sure you are next-year compliant.
Of course, maybe I'm just envious that I didn't capitalize on that feeding frenzy in the first place....
--
If "external" is the opposite of "internal", what is the opposite of "increment"?
The 2-digit year “09” (2009) is 0000 1001 in either binary or BCD. So when you reverse-engineer the BCD date field, you assume it’s a binary number when in fact it’s BCD (and you should have looked it up, instead of assuming this).
Then you get to year “10” (2010), which is 0001 0000 in BCD, not 0000 1010 as you expected. 0001 0000 is binary for decimal 16. Welcome to year 2016.
Alexander Peter Kristopeit bought his basement from his mommy for one dollar.
The unix idea of one-second-per-integer-count sure looks good now, doesn't it?
Leap years, leap seconds, and what’s now + 1 year?
Better it may be in some respects, but not “simple” in all cases.
Alexander Peter Kristopeit bought his basement from his mommy for one dollar.
At least you'd be in good company
note: i'm known as plugwash most places but i screwd up registering that here somehow in the past and now can't register