Live data from Hacker News

The screen that set off the ballistic missile alert on Saturday

twitter.com

281–290 of 375 posts

Re: The screen that set off the ballistic missile alert on Saturday

#281

If that’s the user interface, I can hardly imagine what’s underneath. Is this thing actually secure with properly designed two-factor authentication, etc. Or a weak password and a PHP script and some rubbish like that?…

OK great freaking point. Man what a terrible idea, web application for a public alert system.

Re: The screen that set off the ballistic missile alert on Saturday

#282

“The BMD False Alarm link is the added feature to prevent further mistakes” This is a joke right? It’s only going to make recovering from a mistake easier, it’s not going to prevent anything.

YES after you get past the mind-blowing photo, the twitter post is also extremely messed up.

Re: The screen that set off the ballistic missile alert on Saturday

#283

This is just my observation, but this is what you get when software is used in such critical situations and yet the entire software engineering/development field is completely non-standardized and practically the wild west. Again, this is my opinion, which I know a lot of people disagree with, but we're going to keep coming up against this kind of stuff until software developers become licensed and accountable for th…

YES once again we learn the hard way that this is the only "engineering" field in which its practitioners are not licensed, certified, belong to a professional organization with safe harbor protections, and so on.

Re: The screen that set off the ballistic missile alert on Saturday

#284

Fix proposal subthread. Can we harness HN collective intelligence to vote up some good suggestions? Instructions: * Reply with your suggested fix to this comment. (That way we can vote equally between suggestions, instead of having them being scattered throughout the thread). * First line is simple one-line summary, optionally followed by a blank line then some exposition. Example: ---------- Simple fix: Seperate lin…

Start a software developer's professional organization akin to the ABET in engineering.

Re: The screen that set off the ballistic missile alert on Saturday

#285

Earlier quoted context omitted.

It looks like quite a normal UI from an "internal" government or enterprise application point of view. In this case, the citizens of Hawaii paid for the bad system design with 48 minutes of existential horror. But these kinds of mistakes happens ALL THE TIME with "enterprise applications." Oracle has similar horrendous UX for their EBS (Enterprise Business Suite), so does SAP, Siemens, etc. People regularly make cost…

I don't know. The interface could be better, but a different interface wouldn't necessarily stop someone who's confused from sending the wrong alert. How many times do you see a dialog box and click "yes" without even reading it? I do it all the time, and it's usually fine... except sometimes I think "wait, what did I just agree to!?" Someone under pressure to get that drill going can easily make the same mistakes, n…

For everyone saying that people are so used to clicking yes on dialog boxes without reading them: Then change that paradigm for different levels of importance. For example, for a test alert, use an automatic countdown that will activate the alert unless canceled within N seconds. The ramifications of a test alert going out accidentally are a lot lower than a real alert going out accidentally. For more serious alerts like this most recent ballistic missile one, turn the entire screen red, have “THIS IS NOT A TEST” header, with an explicit acceptance required to send the alert. Two people may mitigate this existing problem but it still doesn’t get to the root of the issue.

Same thing with your hammer analogy. Everything shouldn’t look like a nail then! A real alert should look like a nail. A real ballistic missile alert should look like a railroad spike (aka really big nail). Test alerts should look like a screw. Etc.

Re: The screen that set off the ballistic missile alert on Saturday

#288

Earlier quoted context omitted.

It looks like quite a normal UI from an "internal" government or enterprise application point of view. In this case, the citizens of Hawaii paid for the bad system design with 48 minutes of existential horror. But these kinds of mistakes happens ALL THE TIME with "enterprise applications." Oracle has similar horrendous UX for their EBS (Enterprise Business Suite), so does SAP, Siemens, etc. People regularly make cost…

I don't know. The interface could be better, but a different interface wouldn't necessarily stop someone who's confused from sending the wrong alert. How many times do you see a dialog box and click "yes" without even reading it? I do it all the time, and it's usually fine... except sometimes I think "wait, what did I just agree to!?" Someone under pressure to get that drill going can easily make the same mistakes, n…

    > a different interface wouldn't necessarily stop someone who's confused from sending the wrong alert.
No. Just. No. It is a horrific design. This one will likely end up in a future UX textbook as a case study. There is simply no excuse for jumbling together a list of options like that. The list items are not even semantically coherent.

Ultimately, however, the individual, his chain-of-command and the system designers have to be held accountable. The scary thing is that many people saw this and said nothing, almost certainly some people heard complaints about this and did nothing, somebody even signed off on this. It demonstrates an organizational problem, I think.

Re: The screen that set off the ballistic missile alert on Saturday

#289
post #272

Earlier quoted context omitted.

Dialog blindness is very real and problematic. They could consider a different UI response between a drill and active alert. Since drills are the majority of their workload they'd get dialog blindness to the drill confirmation, and then you'd design the active alert confirmation to be a-typical of the drill (for example a different color dialog, and have an "I agree" checkbox on the active, but none of the drill).

I ended up with a checkbox plus a mandatory input field requesting a reason for one irreversible action in a system I worked on. Just adding a checkbox and later a popup with an additional warning wasn't enough. An undo function is obviously best, but ufortunately while technically possible, it took a while - possibly a day - to restore due to ripple effects in other systems, and it normally wasn't the person clickin…

Undo is definitely the ultimate UI safeguard.

Unfortunately a lot of organizations don't want to invest the time/resources into creating it. Particularly when it gets into discussing exactly how the underlying data should be handled during the undo window (e.g. does it exist? Is it just flagged deleted? What about relations? Do all of our queries that touch this data check that? Etc).

Re: The screen that set off the ballistic missile alert on Saturday

#290
As a designer 2 things going through my mind since the moment the story broke the EMS system fired a statewide alert due to a wrongly clicked HI element:

1) How in the name of everything holy did this monstrosity of an interface for such an important system get approved in the first place?

2) Given a monstrosity of a interface: Why are there, apparently, ZERO safeguards in place to make sure the human error rate at least has a HUGE chance to get close to zero?

Post reply on HN