@SteveBellovin@infosec.exchange
Post #4152891
2026-07-28 02:37 UTC
@mattblaze@federate.social A classic case. See https://www.newscientist.com/article/1818118-technology-sorry-no-numbers-the-day-the-uss-telephone-network-crashed/ and https://catless.ncl.ac.uk/Risks/9.63.html#subj3.1 — and https://catless.ncl.ac.uk/Risks/9.69#subj5 for the precise bug: misuse of a a 'break' statement. The salient points: it was a flaw in error recovery code, which was triggered if and only if while a phone switch was rebooting, it received two incoming call requests within 1/100 second.
In the aftermath, AT&T started classes in the proper use of 'break' statements…
Replies (1)
-
@darkuncle@infosec.exchange 2026-07-28 03:02
@SteveBellovin@infosec.exchange @mattblaze@federate.social tip of the hat for reminding me of the Risks list, which I haven’t read in probably 10-15 years now ❤️