Monday, August 06, 2012

ANS -- The Looming Software Catastrophe

Here's a short article by Doug Muder on the coming computer/financial disaster.  He shows that its coming is inevitable. 
Find it here:   http://weeklysift.com/2012/08/06/the-looming-software-catastrophe/    
Bad word warning.
--Kim


August 6, 2012 – 11:41 am Categories: Short Notes, Weekly summaries | Comments (1)


The Looming Software Catastrophe

A couple of stories this week don't seem directly connected, but do suggest a theme: Wednesday, an automatic-trading program at Knight Capital went out of control and spewed "a torrent of faulty trades" onto the stock market for half an hour before any humans at the company figured out how to pull the plug. Knight's losses are estimated at $440 million, which might kill the firm.

Thursday, a Republican filibuster scuttled the proposed cybersecurity bill, which

would have established optional standards for the computer systems that oversee the country's critical infrastructure, like power grids, dams and transportation.

The Republican senators filibustered even though the bill had already been watered down to the point of being useless. A cybersecurity expert described the original bill as "all sticks and no carrots". So when companies protested, a compromise made the sticks voluntary. We wound up with a bill that would allow masochistic corporations to submit to a voluntary binding.

Even that couldn't pass. (The bill also had privacy and civil-liberty problems, but that's not what brought it down.)

So here's what we learned this week:
  • Bad software, even without any apparent malicious intent, can destroy a Wall Street firm in less time than it takes a banker to finish his second martini.
  • Software controls the power grid, oil and gas pipelines, the banking system, and a few other things that terrorists, hacktivists, hostile foreign powers, or joy-riding teen-agers might like to screw up.
  • The most toothless imaginable attempt to establish some security standards is too onerous for Congress' corporate masters to allow.

What can you conclude from that? I think there's a trend here that won't stop until there's a disaster big enough to scare the pants off everybody. And that means: There will be a disaster big enough to scare the pants off everybody.

The software culture. Our software development culture revolves around promising whiz-bang new features. If you can actually make them work most of the time, that's even better. If they could fail without taking down the whole system, that would be nice ­ but hey, nobody's perfect.

The problem is that security, reliability, and resiliency aren't "features" that you can add to an already-existing product. They are systemic virtues that have to be designed in from the beginning and supported by a continual process of reporting, error containment, and a system-wide appreciation of rigor. Fundamentally, that's bureaucratic and slows things down. We hate stuff like that.

That is, we hate it until some rogue application starts losing $15 million a minute. Then, slowing things down starts to sound like a good idea.

And that's just a screw-up. What could somebody do if they really worked at it? That's the so-called "digital Pearl Harbor" scenario, where an enemy doesn't bother with bombs or bullets, it just takes down some key element of our infrastructure.

It could be that, or just a glitch, or some hacker's joke that gets out of hand. But you can't build vulnerable systems on top of other vulnerable systems forever and think that nothing is going to happen.

The political culture. Thursday's vote made it clear that the government is not going to get out in front on this. Congress isn't going to act until either business or the general public demands it. But how is that going to happen?

The business world doesn't know how to think about stuff like this. Nobody knows how to estimate the odds of a software disaster, or predict the resulting damage, so there's no box on a spreadsheet that says how much a firm is risking with its current software. Making a company's software more secure would entail both a capital cost and an operating cost. What can a CEO compare that to in order to get a return-on-investment estimate? Without that estimate, software security just looks like a voluntary reduction of profit. What CEO is going to sign up for that?

But security could show up on a different part of the spreadsheet: not risk assessment, but marketing. Maybe the public would pay more for a secure product than an insecure one. Or, looking at it a different way, people might choose to locate their a bank or brokerage account at a firm that cared about software security.

But how is that going to work? You have no idea how the magic happens when you log into your bank account, and in the absence of a major catastrophe, you have no way to judge whether one system is more secure than another. You're certainly not going to pay extra for a security claim you can't judge.

And financial firms aren't going to advertise that their risk is lower than somebody else's, because they don't want you to think online transactions are risky at all. They're not going to start talking about security until after the public is scared.

A simple technique for predicting the future. Keep these two principles in mind:
  • A trend will continue until something stops it.
  • Trends that can't go on forever won't go on forever.

So if X is the only thing that could possibly stop a trend that can't go on forever, sooner or later X will happen.

The trend that can't go on forever is piling vulnerable systems on top of vulnerable systems. And I think I've just talked myself into believing that it won't end until the public gets scared.

So X, in this case, is an event that scares the general public about software security. I can't tell you what it's going to be: a nationwide blackout, some unrecoverable loss of financial records, who knows? But it has to be big enough to break through our collective denial.

I also don't know when that's going to happen. Tomorrow? Five years from now? But if that's the only way for an unsustainable trend to end, it's got to happen.

24 comments:

ASP.NET Development said...

Thanks for this information which is pretty good and useful for me. Keep it up.
Software Development Technologies

Anonymous said...

Heya i'm for the first time here. I came across this board and I find It really useful & it helped me out a lot. I hope to give something back and help others like you helped me.
Also visit my website ... kostenlos spielen ohne anmeldung

Anonymous said...

Und dieser erste Schritt ist im Internet das Ansprechen mit der ersten Mail.
Darin liegt der Unterschied zu normalem Lida Dai Dai Hua Kaffee Geeignet ist der Kaffee
nicht nur für <. beheben Sieniemals die eine Stoerung und Sie werden hoechstwahrscheinlich wieder zunehmen oder gar nicht erst - Gewicht verlieren.
Visit my website click Through the following web Site

Anonymous said...

1. Spend some time to design a good-looking 404 page, site offline page, etc.
The more doors you have the more chances of people finding
it. Out of those 6 keywords, further reduce the number of keywords.

SEO must be implemented by following a step by step process.
Examine in detail the shift in the customers' rank, and progress in their positions. Identify your niche audience and be an active member on the forums and blogs. This is because there is a stiff competition in this particular field and the market is flooded with lots of firms that provide proficient SEO experts India services at the economical costs. Configure You - Tube settings by changing the default settings to your preferred and secure preferences. What are the advantages of article submission. It is a sagacious process that has become even tougher with the continuous changes in the algorithm of the major search engines especially Google. Still hanging on. Let us assume that at this point you have 6 keywords. Such services also include some research that will need to be done so they can apply this research on major keyword. Once you find the right and affordable SEO Company, it is essential to talk about your business objectives, target customers and future goals with the professionals to help them develop their strategies accordingly. SEO defined. The World Wide Web is an incredible source of customers and potential revenue for all types of businesses and companies in all niches. But be aware of the traffic issue. What is the magic formula. Addition and updation of fresh content always leads to arrival of increased traffic to your websites.

Check out my site ... www.loopydates.co.uk

Anonymous said...

Hey there! I'm at work browsing your blog from my new iphone! Just wanted to say I love reading your blog and look forward to all your posts! Keep up the fantastic work!

Visit my website :: youtube converter
Also see my site: videos von youtube downloaden

Anonymous said...

Cοnsidеr runnіng а contеѕt or offering
a free рrоԁuct tіp ѕheеt that aссοmрanies
the intеrѵiеω. Alsο, by having а raԁіo internѕhip in your resumе, therе
іs a bеtter chаnсe foг
you to become a DJ when уou аpply fог a јob in any rаԁіo station in thе natіon.
Even tοdaу, I go big gаme hunting anԁ all this, anԁ
the mоre ԁangеrous ѕomethіng is,
the happіеr I am.

my wеbsite: myvideo downloader

Anonymous said...

There are many different kinds of tools and techniques required to deliver an exceptional SEO India results.
''. You can then take a hard look at the companies
that come up for that particular keyword. SEO (search engine optimization) and keyword density are terms that
scare many a writer who want to write for the internet.
If you simply copy the original manufacturer's description, you don't add value to your product and you certainly don't add your personal touch that can make you stand out from your competitors. Meta Name and Meta Description Tags are two of the important ones. Instead, the developer should concentrate on the functions mentioned in this article first, as they are the basis for further extension of the Word - Press header file. This means that they follow only the steps given to them by Google and other major search engines. The title is supposed to explain the article, and the title is what your readers see when they search for content. What are the advantages of article submission. Arrange the H1, H2 and H3 tags serially with proper hierarchy. Still hanging on. Advertise by Selling Branded Products. Here you will need an SEO agency such as Webfirm to try and run damage limitation. Create a general, high-level category in which you want to manage all phrases'for example 'global,' 'online,' 'channel,' and so on.

As of now, Thomas Lenarz has helped many people get the information on reputed SEO companies.
Have you been looking at your competitor's websites to see what kind of keywords they're using.
When a person enters a keyword into the search box of a particular search engine such as Google, there will
be scores of results showing out which are a result
of a search engine algorithm devised by that particular search engine.
A good web solutions company will always provide you realistic
time frame for the results to show up. Addition and updation
of fresh content always leads to arrival of increased traffic to your websites.


My site; Hershel

Anonymous said...

Tennis balls, wiffle balls, ping pong balls, and golf balls can also be used.
Real game, real people, real thrill and of course real money; is all about online
gaming, the perfect place to fulfill your desire to be a multi millionaire.
Each child is given 30 seconds to race to the pile and make as
many matches as possible before time runs out.


Here is my blog youtube videos downloaden

Anonymous said...

you are really a good webmaster. The site
loading velocity is incredible. It seems that you are doing any distinctive trick.
Moreover, The contents are masterwork. you have performed a wonderful process in this topic!


My web-site; omerta city of gangsters game key

Anonymous said...

World wide web has without a doubt built taking part in extra fascinating.
However, playing it online has now increased your chances of winning.
He then becomes more superstitious and does not realize that it was his subconscious that made him
lose the game.

Here is my web page etransing.com

Anonymous said...

Tomb Raider, Mega Moolah, Mermaid's Millions, and Blackjack are some of the new Android game apps that have been released from Microgaming's partner, Spin 3.
A look into some of the best Star Wars apps to be found on i - Tunes, including games,
fun soundboards, books, and more. The reason for this rather
strange feature is that, as described above, apps in the Android Market
are listed as they are submitted, without any testing.


my page ... video downloader

Anonymous said...

These five free basketball game apps for the i -
Phone will surely help you get your game on. Each program will have a box with a checkmark, find the programs you'd like to uninstall and uncheck that box. The reason for this rather strange feature is that, as described above, apps in the Android Market are listed as they are submitted, without any testing.

Have a look at my site www.havluagglo.ch
Also see my site - videos von youtube downloaden

Anonymous said...

Knee braces are designed for a particular kind
of knee injury or knee problem first and foremost,
and then you should consider the sport of skiing. People can control
their blood sugar levels regularly according madhunashini Vati.
Many Thai sellers sell it on e - Bay and ecrater though, so
if you're interested in trying some it shouldn't be too difficult to
get.

Here is my web site; Read This method

Anonymous said...

When you quit, you can immediately feel its decision within 24 hours,
health benefits, which can cause you to not smoke forever.

Continually letting a battery drain will make it die much faster then it normally would.
Mobile computing is continuously getting better with best performance, smarter processors,
light weight and handy designs, but as we all know, the
main power of the mobile computing device (weather it is laptop, mobile,
PDA or e-book reader) resides in it's battery capacity.

Feel free to visit my page ... youtube converter

Anonymous said...

Moreover, over the internet there are 2 main versions of this game that
is the RA deluxe with 10 pay lines and the classic RA with 9
pay lines. Afterwards, joust your cash chips on the cash
desk. He then becomes more superstitious and does not realize that it was his subconscious that made him lose
the game.

Take a look at my blog; online Games
my web page - keithdevens.com

Anonymous said...

I didn't want to drive all the way back to Autozone to pick up a new terminal post clamp, so I figured I'd attach it and
see what happened. The Lenmar 1530 m - Ah for the Amazon Kindle 1 e-reader is the first choice
for consumers. Aside from these types of power packs, you can
even choose the 8-cell and also 12-cell electric battery.


Feel free to visit my blog post pawn.tom.ru - pawn.tom.ru

Anonymous said...

Rather,all the applications keep running in the background
although in a low power state,utilizing both processing power and memory that leads to a
lower battery life. The Lenmar 1530 m - Ah for the Amazon Kindle
1 e-reader is the first choice for consumers.
While the older 17 inch Mac - Book Pros lack the benefits of the unibody design,
they do have the added feature of user-replaceable batteries.


Also visit my blog post; Click That Link

Anonymous said...

Literally wiping sweat from my forehead after doing my
best 90s dance moves to a memorable mix of old school joints from
the likes of Special Ed, Eric B. In addition to music, there is
a wealth of other audio and informational materials out there to investigate.
Individuals have acquired different software and programe through which you could download these videos.


My page ... http://www.howmuchjoy.com/getknownnowmembership/user/view.php?id=44063&course=1

Anonymous said...

Multiplayer versions is more exciting as in this, you'll be able to team up or even contend with other participants to defeat the enemies. Finding good outsourcing companies is the key, as naturally you do not want to lower the quality of the service. Next Jim Deacove developed a few of his own board games based on the principles of cooperation, group strategy and joint problem solving.

My site: kostenlos spielen

Anonymous said...

Having read this I believed it was extremely informative.
I appreciate you finding the time and energy to put this informative article together.

I once again find myself spending way too much time both reading and posting comments.
But so what, it was still worth it!

Also visit my webpage - book auf ra kostenlos spielen

Anonymous said...

I am not sure where you're getting your info, but great topic. I needs to spend some time learning much more or understanding more. Thanks for great info I was looking for this information for my mission.

Take a look at my web blog http://socialbizconnect.com/index.php?do=/profile-52624/info/

Anonymous said...

These are in fact fantastic ideas in about blogging.
You have touched some good factors here. Any way keep up wrinting.


Feel free to visit my blog ra milhoff

Anonymous said...

Its such as you learn my mind! You appear to understand a lot approximately this, such as you wrote the e book in it or something.

I feel that you just can do with some % to drive the message house a little bit, however other than that, this
is excellent blog. A great read. I will definitely be back.


Stop by my weblog novostar spiele

Anonymous said...

I like what you guys are usually up too. Such clever work and exposure!

Keep up the awesome works guys I've incorporated you guys to my own blogroll.

Here is my weblog; book of ra