News for hackers. Stuff that matters.
Re:U.S. to ground Boeing 737 Max 8 by linuxftw on Wednesday March 13, 2019 @04:32PM (#19383413)
I think we should also lay some blame on the airlines as well. Why should they have accepted such planes in the first place? Don't they have their own engineers and safety inspectors to counter-balance a plane company's marketing department?

More so, I hope there are subpoenas of Boeing's internal communications regarding this matter. Rumors I have read elsewhere indicate some real skullduggery if true.

Lastly, it really calls for the need of independent software auditing and compliance. There should be no proprietary software operating in regulated airspace.

Re:U.S. to ground Boeing 737 Max 8 by jolux on Wednesday March 13, 2019 @04:37PM (#19383471)
Come off it. Being closed source has nothing to do with it.
Re:U.S. to ground Boeing 737 Max 8 by Brakenshire on Wednesday March 13, 2019 @05:37PM (#19384131)
I’m not necessarily arguing his case, but if their software was open source it could be scrutinized far more closely. Is this software actually audited at all before an accident occurs? Do regulatory agencies have the bandwidth to do that? I really wouldn’t be surprised if this (and a lot of the embedded software in cars as well), simply isn’t being thought through because of commercial pressures.
Re:U.S. to ground Boeing 737 Max 8 by jolux on Thursday March 14, 2019 @12:23AM (#19386523)
The whole "enough eyeballs make all bugs shallow" thing is an empirical falsehood as evidenced by all of the breathtaking security bugs discovered in open source software over the past decade or so. It's not just anyone who is qualified to do auditing. If the software needs to be audited more carefully, the solution is to find the people qualified to do so and have them do it. It is almost completely unrelated to whether or not the source is open, which I'm also not against and in fact would be all for. However, arguing that proprietary code is inherently dangerous and open source code inherently safe is incredibly dangerous of itself and needs to be shut down.
Re:U.S. to ground Boeing 737 Max 8 by linuxftw on Thursday March 14, 2019 @11:13AM (#19389932)
You're confused about open source software and security.

If a business is using proprietary software that is found to have critical security bugs, they are 100% beholden to the vendor to get a fix. The vendor may decide to not fix that bug.

With free software, when (not if) a bug is found, the user has the right to fix the software.

While 'open source' might not be inherently 'more safe' than proprietary code (which we can't audit, so unlikely to be safe), it's inherently more safe due to the fact that the end user might actually be able to fix it, if required.

Re:U.S. to ground Boeing 737 Max 8 by jolux on Thursday March 14, 2019 @03:17PM (#19392554)
I know how free software works...
Re:U.S. to ground Boeing 737 Max 8 by linuxftw on Friday March 15, 2019 @10:01AM (#19399740)
Then why would you make such a statement?
Re:U.S. to ground Boeing 737 Max 8 by jolux on Sunday March 17, 2019 @12:00PM (#19414659)
Because I have a different perspective than you and I don't engage in irrational zealotry about it?
Re:U.S. to ground Boeing 737 Max 8 by Brakenshire on Thursday March 14, 2019 @07:11AM (#19388157)
I didn't say that and the poster above didn't say that, but having the source available would undoubtedly help. In this case in particular you would have had many groups looking at the code in parallel, rather than the need for a slower, closed process because of commercial sensitivity. If both crashes end up being linked to this system, then the fact the code wasn't publicly available would likely have contributed to the inability to prevent the second crash.
Re:U.S. to ground Boeing 737 Max 8 by jolux on Thursday March 14, 2019 @10:03AM (#19389264)
You can’t say that though. For one thing code reviews are almost hopeless for catching normal bugs in the first place. For another, just because code is available does not mean anyone is actually looking at it. The people who are qualified to do this stuff quite likely will not do it for free.
Re:U.S. to ground Boeing 737 Max 8 by Brakenshire on Thursday March 14, 2019 @12:48PM (#19390994)
This is about investigating one particular widget which has been implicated in these crashes, had the source been available people would have been able to look at exactly how that system works over the last months, rather than speculating while they wait for the closed investigation to occur, and while they wait for the second accident to occur. This isn't a general 'bugs will be found', it's about being able to substantiate targeted suspicions about a particular part of the code.
Re:U.S. to ground Boeing 737 Max 8 by zacwebb on Wednesday March 13, 2019 @04:59PM (#19383701)
> There should be no proprietary software operating in regulated airspace.

Lmao seriously??

Re:U.S. to ground Boeing 737 Max 8 by dzhiurgis on Wednesday March 13, 2019 @07:11PM (#19384919)
It probably should be released into public scrutiny, but not developed as open source project.
Re:U.S. to ground Boeing 737 Max 8 by linuxftw on Wednesday March 13, 2019 @05:16PM (#19383904)
Sure, why not?
Re:U.S. to ground Boeing 737 Max 8 by moneytalks on Wednesday March 13, 2019 @05:06PM (#19383789)
Yes, the entire flight control system could just be an Electron app running open source javascript. Or typescript if you're a (type) safety nut.

# npm install boeing-aileron boeing-throttle boeing-flight-controls

Re:U.S. to ground Boeing 737 Max 8 by ReptileMan on Wednesday March 13, 2019 @05:16PM (#19383902)
Trust me, somebody somewhere have said that unironically...
Re:U.S. to ground Boeing 737 Max 8 by anticensor on Thursday March 14, 2019 @02:28PM (#19391969)

   let airbus.controls=Object.assign({},boeing.controls};
   airbus.controls.yoke=undefined;
   airbus.controls.headings=joystick;
   airbus.controls.safety=basic_law;
Re:U.S. to ground Boeing 737 Max 8 by 0815test on Wednesday March 13, 2019 @07:23PM (#19385002)
Because F0RTRAN is so much better and safer than Javascript. Riiight.