Lightbulb-SOLUTION-Don't read if you don't want to know!
"Robert J. Brown" (rj@eli.elilabs.com)
Fri, 24 Oct 1997 14:44:25 -0500
>>>>> "Richard" == Richard Masoner <richardm@cd.com> writes:
>> Of course, this takes advantage of several *UNSTATED*
>> assumptions:
Richard> Two more unstated assumptions are that we know that all
Richard> three switches are in the "off" position when we start,
Richard> and that we know somehow which switch position is "off"
Richard> and which is "on."
Of course, if you concede the first of these, then the second is
subsumed.
>> Do engineers spoil all your fun? For engineers, this kind of
>> technical discussion -- looking for holes in a design -- *IS*
>> fun: its called a design review!
Richard> Not only that, assumptions will "get" you. I wrote some
Richard> code very recently where I assumed that a request to
Richard> allocate zero bytes would result merely in a NULL
Richard> pointer. I didn't bother to test my assumption,
Richard> primarily because of time pressures.
Richard> The real result -- at a customer site no less -- was a
Richard> system PANIC :-( The routine that allocates the memory
Richard> specifically tests for a request for zero bytes. If that
Richard> assertion fails the function calls panic() instead of
Richard> returning NULL.
A similar request in a Forth system might well try to allocate 2^32
bytes of memory, assuming you are running on a 32 bit machine.
Richard> The RISKS Forum on the Internet (news:comp.risks and
Richard> elsewhere) discusses this type of stuff in detail.
I am convinced that there are *FAR* more bugs, holes, etc., in the
computer systems that we rely on daily than most people would even
begin to suspect.
Back in 1984, I was working on an energy management system. After
several months on the job I realiwed that there was a significant
national security risk in the system, as an intruder could gain access
to the central control computer for each city and plant a time bomb,
which when it went off, would crash the entire national power grid.
Moments later, the enemy missles arrive...
The *REALLY* scary thing was that I was told to keep my mouth shut, as
such a statement would affect the marketability of the product!
Fortunately the system was never deployed, but what about all the
systems out there that *ARE* in place? Electric power, telephony, air
traffic control, railroad control, highway traffic systems, oil and
natural gas pipeline control systems, etc. What about the real-time
financial systems out there that run the international financial
markets?
Recently, our government has begun to wake up to this threat. A
couple of years ago, an SBIR project was to investigate how virus
attacks could pose a threat to military computer systems. Also
desired was an anti-virus to get rid of any such infection, and a
virus to infect enemy computers.
The infamous Y2K problem ain't nothin' compared to military
cyber-espionage. I really believe that the next major war will be
fought in the information realm; WW1 was a ground war; ww2 was an air
war; WW3 (Armageddon?) will be an information war.
--
-------- "And there came a writing to him from Elijah" [2Ch 21:12] --------
Robert Jay Brown III rj@eli.elilabs.com http://www.elilabs.com 1 847 705-0424
Elijah Laboratories Inc.; 37 South Greenwood Avenue; Palatine, IL 60067-6328
----- M o d e l i n g t h e M e t h o d s o f t h e M i n d ------