Z2k9 Bug Strikes The Zune

From the company that brought you Windows ME, and Windows Vista, Microsoft Corporation today introduced the world to the Z2K9 bug. Apparently all 30GB Zune’s reboot and freeze due to a bug in the date/time drivers. Classic. Microsoft’s solution is to simply wait until 2009 (a few more hours). Even more classic.

This does bring up one of every programmer’s biggest pet peeves: date/time code. I’ve mentioned my hatred of time before. It’s one of the most obnoxiously complicated things to work with due to all of the complexities from leap seconds to leap years. If you need to do something involving old dates, it gets even more complicated. Remember Julian Thursday, 4 October 1582 was followed by Gregorian Friday, 15 October 1582. Yes you read that right. Also don’t forget that only certain countries (mostly those under strict influence of the Pope) switched on that date. There was dual dating for some time. Then you have timezones, which ideally would be geographically correct and 15° of longitude apart, but instead zigzag and not even along territorial borders. Worst of all is daylight savings time. Not everyone participates in that, and sometimes just not every year, or at the same time. Even states are split, just check out the chaos in Indiana.

Griping aside, none of these likely caused the Zune bug. Since it’s a freeze, I’d guess it’s nothing more than an infinite loop or some other trivial programming error on a leap year.

Everyone remembers the infamous Y2K bug. Many uneducated folks still claim it was nothing to worry about and overblown, but it still cost between $300-600 billion dollars depending on whose estimates you believe (3.596 billion from the US military alone). Since a large portion of the cost was in the private sector, there’s no true tally.

The next big day to keep in mind is January 19 2038 3:14:07 GMT. That’s when the 32 bit computing will officially freak out since most Unix-like computers store time as a signed 32 bit integer counting the seconds since Jan 1, 1970 (Unix Epoch). After that we go back to 1901. There will likely be some 32 bit computing left in 2038 considering how long embedded systems can be ignored and silently slaving away in the background. For reference the B-52 Stratofortress entered operation in 1955 (they were built until 1962). They are expected to be taken out of service in 2040. This is the exception for US military aircraft, but don’t think this is the only old hardware out there. The Hubble Space Telescope has a 32 bit 486 processor and launched in 1990 and assuming the backup computer is functional it will be serviced soon to extend it’s life by another few years making it’s service life 20+ years. It’s unlikely Hubble will make it to 2038 but Hubble shows how long expensive systems can survive in active use. This date is only 30 years away. This will cost the world some serious cash.

On the upside according to Wikipedia 64 bit systems will be good until Sunday, December 4, 292,277,026,596. Odds are that won’t be a concern for most people alive today.

Reassuring? Yes. But your Zune is still fried for a few more hours.

Update [1/5/2009]: Here’s some pretty detailed confirmation that it was indeed an infinite loop error. I know my crashes ;-) .

Making Products Easy To Repair

Lately consumer protection and financial laws seem to be a favorite of politicians who want to help the American people “keep their hard earned money”, er whatever slogan it is they go with these days. For a long time I’ve been of the feeling that they are overlooking the obvious. Making things easier to fix, hence longer lasting. Sames money, and helps the environment. How’s that for killer legislation?

Most household items are surprisingly simple to repair. Thanks to automation at the factory, everything has been pretty much broken down to LEGOs in complexity. Simple modules that are interconnected to form products. This technique also allows them to use the parts in multiple models hence lower cost of production. But every so often one part breaks rendering the product to be a giant paperweight. From home appliances to your computer, it really doesn’t matter what the product does.

What’s really needed is easier access to parts. Every manufacturer’s policies vary, but in many cases it’s extremely difficult to find parts. When you do your often paying hundreds of times what that tiny piece of plastic is really worth. Of course it’s still sometimes cheaper than replacing the product, but not by a huge margin.

This should really be law:

  • Standard Screws – Products should be assembled using standard screws. No more proprietary heads. In situations where a screwless design is used (iPod for example) explanation of how to open should be available.
  • Parts breakdown – Every product should either include on paper, or upon request from manufacturer a list of all parts in the product with part number.
  • Easy Access To Parts – Replacement parts should be available at cost + 10-15% + shipping & handling. Keep them affordable and easy to order. It should be either through the manufacturer directly or via an authorized agent, via phone or online. Parts should be available for a minimum 3 years after the last warranty expires for home electronics. Home appliances should be longer, I’d say 10 years. If the manufacturer provides repairs themselves or service parts to authorized technicians the parts should be available for as long as they are to service centers, whatever is longer.
  • Warranty Disclaimer – Should state what are “user serviceable parts” and can be replaced within warranty, and that anything else will void the warranty (it’s your problem not theirs).
  • Hazards Warning – Should warn of any obvious and non-obvious hazards within the device, such as capacitors that can contain high voltage even when unplugged (yes, newbie, it common, and I’m sure it hurts if you make that mistake), chemicals, or sharp objects. Ideally devices would color code such hazardous parts, and perhaps things that need to be disposed of specially such as batteries.

By making things easier to repair, this would ensure that people can conserve money by not replacing products because of one small problem. This would also be a major environmental win because people can conserve and avoid filling landfills with mostly working products. This is especially true for electronics.

LCD AssemblySo far the only one who seems to come close to meeting my guidelines is IBM/Lenovo. They make it very easy to order replacement parts (though it’s hard to find the page). They also have excellent diagrams of the whole product exploded so you know exactly how it goes together. This makes owning a IBM/Lenovo product a lot cheaper since you can just order the replacement part as needed. If your under warranty they seem to have no problem shipping replacement parts if your comfortable installing and don’t want to ship your laptop out for repairs (which sucks, trust me).

A close second is LG. I’ve ordered replacement cell phone parts a few times. No diagrams or assistance from them, but their parts # is very helpful in identifying the actual part every single time. Just give the model number and explain the part. Required overnight shipping which added significantly to the cost, but overall not a bad deal.

NordicTrack isn’t bad either. I was able to order a replacement controller and turn a seemingly dead-as-a-doornail treadmill into a perfectly working treadmill in a matter of minutes. Nice diagrams on paper, and online ordering process was pretty painless. That simple replacement saved significant cash and kept a heavy treadmill out of a landfill. Price of parts weren’t too bad either.

For those who suggest eBay, that’s really a last resort. Your essentially buying salvaged parts of unknown quality or origin. If you treat your stuff well, why put in some part that’s likely been tortured by a previous owner to the point where the product was sent to salvage? Low cost replacement parts are the way to go. Also prevents bogus counterfeits, buying damaged goods.

That would go a long way to helping people save some cash, give companies a new revenue model (10-15% above cost is a pretty nice margin), and help the environment all in one sweep. Some companies are already much closer to fully complying with this list than others. That just proves to me that this is a reasonable proposal. It’s insane to replace something because of one small piece.

Image From Lenovo

MTA’s Fail Whale

Apparently the Fail Whale in tech is a disease lately. The latest obvious occurrence has been New York’s MTA with their MetroCard vending machines. I noticed on Monday walking into the station, the lines in front of the vending machines were insanely long (normally 2 people max, now 15+) and presumed just a large group of tourists. Then saw it when I got off at my stop (hmm… two stations overloaded with customers? Strange). This morning it was less but still crowded (I guess some people gave up), and learned the problem myself. Apparently they can’t process credit cards lately.

Many New Yorkers purchase an $81 30-Day Unlimited Ride MetroCard,a s opposed to putting a fixed amount on a card. I suspect many do not carry $81 cash on them because we are a society that uses credit cards for convenience. So those people just pulled a couple dollars out of their wallet and bought a regular fare card with the intent to come back later. At $2.00 a fare this could provide a nice bump for the MTA, who I might add is cash strapped and looking to raise the fees after just cutting the bonuses from 20-15%.

Now regarding that bonus cut, that creates a whole new can of worms. For those who don’t know: if you purchase more than $7, you get a bonus. 20% always leaves a nice even number. 15% on the other hand leaves you with spare change. Leaving room for things like the MetroCard Bonus Calculator. What a mess. You could always put a few dollars on the card to clean it up, but then you loose the 15% bonus on that money. Over time that adds up. I’m sure many people just throw away the cards with change on it, but I find that somewhat silly.

Twitter seemed to survive the Chino Hills earthquake, so the MTA wins the Fail Whale award for today.

How To Steal A Credit Card

I said a while back RFID credit cards still have to prove themselves. Today I saw this interesting story on CNet:

As part of his presentation Wednesday, Laurie asked for someone from the audience to volunteer a smart card. Without taking the card out of the volunteer’s wallet, Laurie both read and displayed its contents on the presentation screen–the person’s name, account number, and expiration clearly visible.

You can find a ton of information including code and the hardware necessary to duplicate this his website RFIDIOt.

Another real potential issue is companies using RFID for security badges. Considering how easy it is to read and duplicate, potentially anyone who can get close to someone walking into an office can capture the data necessary to produce their own ID card. In this case only matching the photo stored by the company on their computer system (not the one on the badge) to the person’s face is security. So for those offices who don’t have security staff doing this, anyone could theoretically get in.

The best security mechanisms are the most simple and discrete. Credit cards are naturally pretty secure if used correctly. Nobody can abuse a credit card unless they know the number. Nobody can read it through a wallet. The wallet in this case is a great security feature. To read it you need to either visually inspect it for the numbers, copy it, get an impression of it, or swipe it through a reader. All things that require intimate contact with the actual card. Impressive security for some old technology isn’t it?

I’ll stick with swiping a credit card for the foreseeable future. Your only not liable for a stolen credit card if you and your credit card company mutually agree it’s stolen or being misused. Otherwise you may be on your way to an expensive dispute. Regardless it may have hit your credit, and you’ll spend a lot of time sorting it out and getting it corrected. Bad credit costs you money. Some individuals make it sound like it’s just a phone call and your done, but people who have had their credit card stolen sometimes spend several months fighting to save their credit.

Hacking A Boeing 787?

According to Wired the Boeing 787 Dreamliner connected the networks for passenger services to critical flight systems:

The computer network in the Dreamliner’s passenger compartment, designed to give passengers in-flight internet access, is connected to the plane’s control, navigation and communication systems, an FAA report reveals.

Here’s what a Boeing spokesperson had to say:

…it is employing a combination of solutions that involves some physical separation of the networks, known as “air gaps,” and software firewalls. Gunter also mentioned other technical solutions, which she said are proprietary and didn’t want to discuss in public.

Would it really be that much more costly to create 2 networks. One for the important stuff like navigation and control systems, and another completely independent network for passengers to download porn? Networking gear isn’t that expensive. Internet access at 35,000 feet is high latency anyway.

I’m really not so sure I’d feel comfortable knowing that the same network that’s carrying a Rob Schneider movie to the guy in 11F is also carrying packets intended for the horizontal stabilizer.

Maybe I’m just paranoid. After all, I’m not to comfortable with the Airbus A380 apparently running windows in the cockpit.

Hopefully they get it all figured out quickly.

HD Photo Now JPEG XR

Back in March I mentioned that Microsoft is trying to standardize it’s HD Photo format as the official successor to the ever so popular JPEG format. Well it’s now looking to become JPEG XR.

Suprisingly it’s still not listed on Microsoft’s Open Specification Promise where Microsoft lists things it won’t sue over. Hopefully they will update that soon. My understanding from what I’ve read is that’s the intent.

It’s a pretty interesting thing going on. Video on the web has improved by leaps and bounds over the years from a tiny grainy video object that took a decade to load, to instantly loading and still improving quality Flash / Windows Media / QuickTime. Photos on the other hand have been using JPEG for pretty much a decade. Most photography buffs don’t seem to fond of JPEG because it can degrade picture quality, but still love services like Flickr.

Will JPEG XR spark a photo revolution by allowing better quality?

Yahoo Goes Green

Yahoo is going carbon neutral. I’m curious how much is offset, and how much is reduction. Yahoo has a fairly large infrastructure. I wonder if they are using alternative power sources, or if they are going to plant a million trees. They do mention:

These projects could include a wind farm in India or a small-scale run of the river hydroelectric project in Brazil. We’re also looking to invest in emerging clean technologies.

Interesting. I wonder if we will see things like carbon neutral VoIP, carbon neutral bandwidth, carbon neutral data centers / colocation / hosting?

Getting A Non-RFID Credit Card

Chase Freedom VisaThe Chase Freedom credit card isn’t bad (1% cash back, 3% on certain items). There is an unadvertised downside. While Chase doesn’t promote it very well, the card contains a tiny RFID chip. This allows you to pay for something using a contact-less terminal (no swiping). Just put your card near the reader and it registers. Is it really any quicker than swiping? Who knows, but likely not by much.

It looks like a regular credit card, same thickness, size, and shape. Just a tiny emblem exists on the upper right hand side to distinguish the onboard cargo. You can see it in the image above. A larger version of it is below:

Blink Logo (sm) Chase

For those wondering, the actual RFID chip seems to be on the left side, opposite the Blink logo.

Chase brands the technology Blink, American Express calls it ExpressPay, MasterCard calls it PayPass. They are all pretty much the same thing.

RFID doesn’t have a great reputation right now. There are some privacy and security concerns, such as an unauthorized party reading your credit card without you knowing. Think this is a tin-foil-hat mentality? It’s been done already. I haven’t found anything online to indicate criminal exploitation yet, but it’s possible and will happen.

Chase Flexible Rewards VisaChase doesn’t advertise this, but if you contact them by phone or email, they will send you a replacement card, without the “Blink” capability. The actual plastic card is their “Rewards Visa” though the paper it’s attached to clearly says “Chase Freedom”. It’s just plastic, the credit plan is in the account not the card. So there you have it, you can get a secure credit card if your concerned about security.

Chase claims “Blink” it’s very secure, but I’m still not personally comfortable with the technology. According to their FAQ (in PDF format):

10. Are blink purchases secure?

Yes. As always, you are 100% protected against any unauthorized purchases. These transactions are safe because they are protected by an additional level of encrypted security. You must deliberately use the Chase card with blink at the point-of-sale to make a transaction. The Chase card with blink needs to be within an inch of the special reader and correctly oriented to be read. In addition, blink transactions use specific data that is protected by the highest level of security.

Judging from the speed in which it can be swiped (as demonstrated on the Chase blink website) one could technically walk by with a bag containing a reader and just brush by the victim to read the card in their pants pocket, sit next to you on the bus/train, etc. Easier than pickpocketing since no actual contact needed (such as digging a hand into someone’s pocket).

We already know they can clone RFID passports. What stops someone from reproducing the credit card, then using it? With regular cards, my wallet is an effective firewall. No way to read the magnetic strip or copy the numbers off of it without the actual card visible. And if my card is missing, I know I have a problem. I always keep it in my wallet so nobody can just look at it. This is a pretty secure way to handle a credit card. With this potential crime, I wouldn’t even know right away, and by the time I do realize I wouldn’t have any idea when/where it was compromised. It could potentially be months between the theft and usage of stolen data.

I’d like to see this tech a little more proven in the “real world” before I jump on board. For now it’s just good to know you don’t have to live with it, you can get a non-RFID card. I didn’t find this advertised anywhere on the Chase website. I guess they realized us tin-foil-hat people would ask for a blink-free card, so they made sure to have an alternative. I must give them credit for that (no pun intended).

Just call/email Chase and ask for a non-blink version of the card. They told me 5-7 days for delivery. No hassle. I was very pleased how painlessly they made it. It arrived in about 5 days.