6 ms·

There was a very similar incident in 1971 ("code word hatefulness"). Back then, three tapes were kept next to a EBS transmitter, two real alerts and one for te

There was a very similar incident in 1971 ("code word hatefulness"). Back then, three tapes were kept next to a EBS transmitter, two real alerts and one for testing. One day, an operator accidentally loaded the real alert rather than the correct test alert, and many stations prepared to tell the country the nuclear war was imminent. The fix was to: > …In the past three tapes, one for the test and two for actual emergencies, were hanging on three labeled hooks above the transmitter… In the future only the test tape will be left near the transmitter. The two emergency tapes [will be] be sealed in clearly marked envelopes and placed inside a nearby cabinet. http://conelrad.blogspot.com/2010/09/code-word-hatefulness-great-ebs-scare.html http://conelrad.blogspot.com/2010/09/code-word-hatefulness-g...

MaxBarraclough 9y ago
That's a good example. Shockingly poor foresight. It's similar to the "A gun is always loaded" principle. Unless you can tell at a glance that a firearm is not in a ready-to-fire state, you treat it as if it is. People are clumsy and forgetful, and you only have to mess up once. Leaving the live rounds right next to the blanks, in that way, is pretty indefensible. (Ignoring of course that blanks can still kill, for this analogy.)
- qbrass 9y ago
  >Unless you can tell at a glance that a firearm is not in a ready-to-fire state, you treat it as if it is That's when you need to treat it like it is the most.
  - MaxBarraclough 9y ago
    You'd really exercise more caution with a broken-open shotgun than a closed one?
    - qbrass 9y ago
      Not more, but I wouldn't let my guard down just because it's playing dead.
- BearGoesChirp 9y ago
  >Unless you can tell at a glance that a firearm is not in a ready-to-fire state Chance you are actually able to say that vs. chance you made a mistake in reasoning that conclusion? Still not a bet worth taking.
  - weaksauce 9y ago
    The at a glance condition is probably the one where you stick a brightly colored piece of plastic in the chamber to act as an unarmed flag. Still best to be careful at all times IMO.
- DKnoll 9y ago
  A blank round looks totally different from a 'live' round with a projectile.
  - pixl97 9y ago
    Don't assume there is just one kind of blank, and don't assume blanks can't kill you. https://en.wikipedia.org/wiki/Blank_(cartridge)#/media/File:7,62x51mm.jpg https://en.wikipedia.org/wiki/Blank_(cartridge)#/media/File:... The first bullet here is a blank.
    - DKnoll 9y ago
      A 'bullet' can't be a blank, as a bullet is a (normally) inert projectile.
      - MaxBarraclough 9y ago
        Going for the 'technically correct' award, are we? Yes, the correct term is indeed 'cartridge'.
        DKnoll 9y ago
        Not really, your entire argument is silly. You should be running through ACTS/PROVE regardless of the state of your firearm or its load.
mortenjorck 9y ago
I'm glad the popular discourse has made it from "train employees better" to "design better interfaces" in this case. But as you point out, this is far, far from a new problem. It's as if we lived in a world where bridges have been built for decades with structural engineers as optional, rather than required by building code. If your project had a budget for a structural engineer, you hired one, but if not, fine, you just had your construction contractor do their best. And so now a bridge just collapsed again (fortunately everyone got off in time) and we're talking about how we really ought to design bridges better, but no one is suggesting the obvious, that we legislate building codes that require structural engineers as part of the bridge-building process. I know this is a controversial idea, as it opens up the question of UX design certification and licensure (if you require UX for critical infrastructure, what are the qualifications?), which can lead to all sorts of unintended consequences of gatekeeping, exclusion, and administrative bloat. But I think Hawaii makes it clear that the status quo is unsafe and unsustainable.
- deleted 9y ago
  [deleted]
- Chaebixi 9y ago
  > I know this is a controversial idea, as it opens up the question of UX design certification and licensure (if you require UX for critical infrastructure...But I think Hawaii makes it clear that the status quo is unsafe and unsustainable. Or even a "code" like the National Electrical Code, which one would be required to comply with when working on critical infrastructure. That's how electricians apply the safety experience gained from previous unsafe practices.
DDub 9y ago
The point of a drill is to drill the procedure into people, so that when it is required the people are operating on autopilot without the need to actively think about the actions that they are performing. I would prefer to see the only two tapes next to the transmitter are the emergency tapes. If there is a drill then the drill setup will replace these tapes with the test tapes, and maybe place a corrupt tape there once in a while. With this fix, in an emergency situation it's suddenly someone has to remember to get the tape out of the cabinet (was it Alice's or Bob's cabinet that we put them in?) and use that rather than follow the process that has been rehearsed. This whole scenario whiffs of improper drill setup, not a failure of following the drill.
- stephengillie 9y ago
  "Scolding the ape" is not a viable UI option. The time for "carrot and stick" has passed. Today's solutions need to leverage volition and obviation, to prevent the opportunity for human error to occur.
  - DDub 9y ago
    I'm not scolding the ape, I'm scolding the organ grinder. When a drill deviates from the actions taken in an emergency it becomes a pantomime of little value. I totally agree that the solution should leverage obviation to prevent human error in an emergency, that's what a drill is all about.
    - Chaebixi 9y ago
      > When a drill deviates from the actions taken in an emergency it becomes a pantomime of little value. Sending an emergency alert isn't an action that requires split-second muscle memory. I think slight deviations in the drill vs. the real thing are fine in this case, in order to prevent false alarms. There's no one-size-fits-all solution here, you have to analyze the trade-offs around speed and the cost of a false alarm.
      - DDub 9y ago

MaxBarraclough 9y ago

That's a good example. Shockingly poor foresight. It's similar to the "A gun is always loaded" principle. Unless you can tell at a glance that a firearm is not in a ready-to-fire state, you treat it as if it is. People are clumsy and forgetful, and you only have to mess up once. Leaving the live rounds right next to the blanks, in that way, is pretty indefensible. (Ignoring of course that blanks can still kill, for this analogy.)

qbrass 9y ago
>Unless you can tell at a glance that a firearm is not in a ready-to-fire state, you treat it as if it is That's when you need to treat it like it is the most.
- MaxBarraclough 9y ago
  You'd really exercise more caution with a broken-open shotgun than a closed one?
  - qbrass 9y ago
    Not more, but I wouldn't let my guard down just because it's playing dead.
BearGoesChirp 9y ago
>Unless you can tell at a glance that a firearm is not in a ready-to-fire state Chance you are actually able to say that vs. chance you made a mistake in reasoning that conclusion? Still not a bet worth taking.
- weaksauce 9y ago
  The at a glance condition is probably the one where you stick a brightly colored piece of plastic in the chamber to act as an unarmed flag. Still best to be careful at all times IMO.
DKnoll 9y ago
A blank round looks totally different from a 'live' round with a projectile.
- pixl97 9y ago
  Don't assume there is just one kind of blank, and don't assume blanks can't kill you. https://en.wikipedia.org/wiki/Blank_(cartridge)#/media/File:7,62x51mm.jpg https://en.wikipedia.org/wiki/Blank_(cartridge)#/media/File:... The first bullet here is a blank.
  - DKnoll 9y ago
    A 'bullet' can't be a blank, as a bullet is a (normally) inert projectile.
    - MaxBarraclough 9y ago
      Going for the 'technically correct' award, are we? Yes, the correct term is indeed 'cartridge'.
      - DKnoll 9y ago
        Not really, your entire argument is silly. You should be running through ACTS/PROVE regardless of the state of your firearm or its load.

mortenjorck 9y ago

I'm glad the popular discourse has made it from "train employees better" to "design better interfaces" in this case. But as you point out, this is far, far from a new problem. It's as if we lived in a world where bridges have been built for decades with structural engineers as optional, rather than required by building code. If your project had a budget for a structural engineer, you hired one, but if not, fine, you just had your construction contractor do their best. And so now a bridge just collapsed again (fortunately everyone got off in time) and we're talking about how we really ought to design bridges better, but no one is suggesting the obvious, that we legislate building codes that require structural engineers as part of the bridge-building process. I know this is a controversial idea, as it opens up the question of UX design certification and licensure (if you require UX for critical infrastructure, what are the qualifications?), which can lead to all sorts of unintended consequences of gatekeeping, exclusion, and administrative bloat. But I think Hawaii makes it clear that the status quo is unsafe and unsustainable.

deleted 9y ago
[deleted]
Chaebixi 9y ago
> I know this is a controversial idea, as it opens up the question of UX design certification and licensure (if you require UX for critical infrastructure...But I think Hawaii makes it clear that the status quo is unsafe and unsustainable. Or even a "code" like the National Electrical Code, which one would be required to comply with when working on critical infrastructure. That's how electricians apply the safety experience gained from previous unsafe practices.

DDub 9y ago

The point of a drill is to drill the procedure into people, so that when it is required the people are operating on autopilot without the need to actively think about the actions that they are performing. I would prefer to see the only two tapes next to the transmitter are the emergency tapes. If there is a drill then the drill setup will replace these tapes with the test tapes, and maybe place a corrupt tape there once in a while. With this fix, in an emergency situation it's suddenly someone has to remember to get the tape out of the cabinet (was it Alice's or Bob's cabinet that we put them in?) and use that rather than follow the process that has been rehearsed. This whole scenario whiffs of improper drill setup, not a failure of following the drill.

stephengillie 9y ago
"Scolding the ape" is not a viable UI option. The time for "carrot and stick" has passed. Today's solutions need to leverage volition and obviation, to prevent the opportunity for human error to occur.
- DDub 9y ago
  I'm not scolding the ape, I'm scolding the organ grinder. When a drill deviates from the actions taken in an emergency it becomes a pantomime of little value. I totally agree that the solution should leverage obviation to prevent human error in an emergency, that's what a drill is all about.
  - Chaebixi 9y ago
    > When a drill deviates from the actions taken in an emergency it becomes a pantomime of little value. Sending an emergency alert isn't an action that requires split-second muscle memory. I think slight deviations in the drill vs. the real thing are fine in this case, in order to prevent false alarms. There's no one-size-fits-all solution here, you have to analyze the trade-offs around speed and the cost of a false alarm.
    - DDub 9y ago