3 ms·

There should be application level auditing and database level. The people with access to managing the database level auditing should be extremely limited.

• onetimeuse92304 3y ago
  Listen. We all know what should have been done. They were not able to do the first thing about running a transaction (ensure that one side of the transaction isn't executed multiple times). What you are saying is an obvious thing and yet it probably is well beyond the maturity of the team that was working on it.
• willvarfar 3y ago
  Interestingly, it seems they may have built their own master-master xml-based database. It's easy to guess that they didn't add an audit feature etc.
  • mavhc 3y ago
    They were using Riposte from https://www.eschergroup.com/riposte-platform/ https://www.eschergroup.com/riposte-platform/ and Oracle. They were using dial up ISDN lines to send the data back, but Riposte didn't support that, or scale to 20k terminals, so that was all new code In general they had a distributed database that couldn't do ACID https://www.postofficetrial.com/2019/12/fisking-horizon-trial-1-meaning-of.html https://www.postofficetrial.com/2019/12/fisking-horizon-tria... https://www.computerweekly.com/news/252496560/Fujitsu-bosses-knew-about-Post-Office-Horizon-IT-flaws-says-insider https://www.computerweekly.com/news/252496560/Fujitsu-bosses... https://www.benthamsgaze.org/2021/07/15/what-went-wrong-with-horizon-learning-from-the-post-office-trial/ https://www.benthamsgaze.org/2021/07/15/what-went-wrong-with...
• robaato 3y ago
  Accounting 101 use journal entries to correct mistakes. Dont edit original records... Have a transaction log...