200912: Is There A Problem Here?: 200912

20091231

Problem ID: 5877527772727129958
Entered by: Ben Simo

Can the house win if players can't play?

CloudSpeaker: I crashed the Players Club info screen on an Aria blackjack machine. Check it.

CloudSpeaker: Here's what it's supposed to look like. Really nice, actually.

CloudSpeaker: After the crash and a reboot, the display went old school. It stayed that way 'til I left it.

Problem ID: 7746683813526309327
Entered by: Ben Simo

LO NECESITO!

Maferitax: Por qué siempre me sale éste error al instalar msn, lastimosamente LO NECESITO!

Translation: Why do I always get this error when installing MSN, unfortunately I NEED IT!

Some software seems to be equipped with a Detector de Necesito. This is a device that increases the probability of failure as the need to use a feature increases. ;-)

Problem ID: 7075637522229138243
Entered by: Ben Simo

You do not have enough access privileges

“Syncing my iphone i get this error, and no new DL's from my phone transfer to my mac. Any ideas?” - @zombieskull13

So do I need more permission volume or the correct permissions?

Problem ID: 5811752684070496066
Entered by: Ben Simo

Unauthorized. Not...

“Dear @atebits — please don't ever change this error message because... Because I love it! #tweetieisawesome” - @jameswood

Problem ID: 2103291559400114727
Entered by: Ben Simo

De schijf die u hebt geplaatst kan niet door deze computer worden gelezen

“The last step where the files will be copied to the USB drive. Then you get an error...” - @iGert

Translation of the top dialog:

The disc you inserted can not be read by the computer.

[Initialize] [Ignore] [Remove Media]

So, drive is unmounted at the end of the aTV Flash install; which then prevents the install from copying files?

Problem ID: 3139063843505527385
Entered by: Ben Simo

Wait or select OK?

“Windows media center is grumpy today” - @antidale

Wait while files are added or select okay to continue using the system. Does pressing OK to continue cancel the adding of media files?

Problem ID: 4042370951070776037
Entered by: Ben Simo

Error saving the document

“WOW. How does a program just refuse to save a file? #openoffice #fail” - @krnlpanik

There are many ways a program can fail to save a document. With error reporting like this, we're unlikely to know what happened this time.

And, no, it is not OK that the file was not saved.

Problem ID: 2666854130774906409
Entered by: Ben Simo

Created Tomorrow

“Windows NTFS #fail. Looks like the NTFS lets you time travel to make partitions in the future.” - @Narniaexpert

Problem ID: 2969416042625759636
Entered by: Ben Simo

Installing...

“No video game should take 10 minutes to install.” - @rbieber

Back in the '80s, I often waited 10 minutes for games to load from floppy disk. :)

Problem ID: 615287943250726181
Entered by: Ben Simo

Bing did not find any results

“Bing! App Fail. Microsoft Fail..” - @SorryOrange

Problem ID: 4056015296422457691
Entered by: Ben Simo

Crashed Arrivals

“Linux screen of death!” - @ozchrisb

Problem ID: 8781488737367819927
Entered by: Ben Simo

The password is already in use with another account

“This is what I call password authentication fail. =P =|” - @ImadJomaa

Wow! If the message is correct, this system appears to be disclosing passwords used by other users.

Problem ID: 535783959480094681
Entered by: Ben Simo

Hang on tharrr matey!

Facebook errors are more tolerable (although even more ambiguous than normal) with the language set to Pirate. :-)

Problem ID: 6155176897493130537
Entered by: Ben Simo

iPod Touch Keyboad Funk

“iPod touch failure is funny” - @cottonserver

“My iPod Touch keyboard does some strange things...” - @ben_v

“Check this iPod touch fail:” - @afroman_mitch

Problem ID: 3383918795954825733
Entered by: Ben Simo

Time warp

Tweeted by SoulPSuperstar.

The 5:50 train is 5 minutes late at 5:59. Cool!

Problem ID: 6030392402571366859
Entered by: Ben Simo

Just like XP?

“THIS IS JUST LIKE WINDOWS XP!!!!!!!!!!!!!!!!!!!” - @TCG96

Just like XP? In what way? That software crashes? That you are given an opportunity to send information to the software's creators? Users are likely to view faults in the context of past experience with previous versions of products.

In this case, I don't think it is a positive connection being made to a previous version of Windows.

Problem ID: 5194660477037998744
Entered by: Ben Simo

Bank of America

“ATM #FAIL” - @catalo

Problem ID: 2275935659782481163
Entered by: Ben Simo

Please forget your password again

“#NYTimes #Fail since you keep locking me out but you keep saying System Error when I try to send email” - @howlvenice

20091230

Problem ID: 1173371459050693030
Entered by: Ben Simo

The BIG W, and I don't mean Windows. Or do I?

“Took this pic yesterday, Windows doing it's thang” - @aggettzz

Problem ID: 6819519032120321687
Entered by: Ben Simo

All picture settings will be resetted

“Please don't turn to your new tv for grammar lessons... LG #fail” - @racheleason

Problem ID: 2617684712169841470
Entered by: Ben Simo

Restart before install

“@palm @vara411 I'm getting this error whenever I try to install apps (and I've already restarted as requested)” - @djtravitron

Problem ID: 4739554048781019550
Entered by: Ben Simo

Content expires if you don't use Windows?

“Warner Brothers was offering a digital copy of The Hangover with my dvd, thought I might as well do it FAIL” - @LisaGuillen

Problem ID: 367163140256632856
Entered by: Ben Simo

Prime Time

“Fail TV station! Someone will be getting fired” - @samba12088

Problem ID: 2168307173698043040
Entered by: Ben Simo

Please supply credentials for the account we failed to create

Tweeted by @hugo_dc.

We failed to create your account, but you may be asked to supply login credentials for the account we failed to create. What!?

Problem ID: 2657670236996088096
Entered by: Ben Simo

There are 2 easy ways to connect with your friends

“Can someone tell me what the other way to connect is? #netflix #fail” - @rcollazo

I don't see much connecting happening with option number two.

Problem ID: 5754196410333748829
Entered by: Ben Simo

Your Kindle Needs Repair

“Worst news of the day... 'your #kindle needs repair'. Luckily amazon overnighting a replacement” - @formerlyjessk

Not cool to have a new Kindle fail. Cool that software detects and reports the need to send the device in for repair -- but only if it really needs repair. Is the issue requiring repair a software or hardware issue?

Problem ID: 4970962505099063847
Entered by: Ben Simo

Blog, bog, bloc, blot, blob, blow

“HAHA, the version of Microsoft Office I'm using doesn't recognize the word "blog" #fail” - @druwynings

Well, blog really isn't a word. Or is it?

Problem ID: 3126646080457981945
Entered by: Ben Simo

Why take the direct route when you can drive around the block?

Tweeted by ThisIsUrLife.

Maybe there's a One Way street on the route?

Problem ID: 5892112843983523760
Entered by: Ben Simo

Because every user knows all about your device tokens

“@TwitBird I also see this error. Thanks in advance!” - @DavidStella

Problem ID: 3376802480909208966
Entered by: Ben Simo

You can now have a life

“JAJAJAJA / Best error page ever jaja. ¿De dónde es?” - @Ac_Queen

Problem ID: 4230040617392653788
Entered by: Ben Simo

A Year 2.01k bug?

“@comcast - My new payment is due on 01/01/0001. Pretty sure that's supposed to be 01/01/0010 #fail #Y2K” - @jlanier01

Problem ID: 8130343917443442299
Entered by: Ben Simo

Password rules

“there are so many things wrong with this error message” - @MichaelHartnett

Problem ID: 2526651442421747231
Entered by: Ben Simo

temporaryReadFailure

You're sorry? Not as much as I am for having chosen to use Google Docs for this document at this particular time.

A temporaryReadFailure doesn't tell me much. I need to access my document now, not later. The Google Docs Help Center just reveals that I'm not the only one with this problem. Based on others' complaints in the Help Center, it appear that temporary could last a day or more.

My document ended up being inaccessible for several hours. This kind of error gives me reason to question the sense of using Google Docs for important work that needs to be accessible. However, I still like it and use it -- but question its value for time-sensitive work.

In Google's defense, this is a free service and they do have a paid business Google Docs service with live support. Perhaps paying business customers can get this error fixed right away.

Problem ID: 707510004844593906
Entered by: Ben Simo

Great apps

“Th System has recovered from a serious error... #verizonfail” - @Kastang

Remember when advert posters didn't crash?

Okay, this isn't a really an advertising poster. It looks like an interactive system promoting applications for Verizon phones. I just hope this isn't an example of the Great apps. :)

Problem ID: 4866940270341607848
Entered by: Ben Simo

What's the difference between undo and cancel?

“Just discovered that shaking tweetie brings up a dialog like this” - @ShotbyRobins

Problem ID: 2693544737611095237
Entered by: Ben Simo

!

“An extremely helpful #iTunes error message.” - @wjdennen

Problem ID: 7335248942138934209
Entered by: Ben Simo

Return status indicates that the value is not correct

“This is a brand new Dell #fail” - @josephpeterson

I think we may need someone to translate this developer-speak to English.

Problem ID: 6422816378292193133
Entered by: Ben Simo

MasterCard, Visa, and Dr Watson accepted here

“Een pinapparaat met Windows NT. #fail dus.” - @pvdp

Problem ID: 6956567289779743540
Entered by: Ben Simo

WhatâЄ™s happening?

“Twitter fail?” - @miker1993

Problem ID: 2336937486662221227
Entered by: Ben Simo

You have been signed out of PlayStation(R) Network

“ACTVISION!!! >:O. HELP!!! I tried everything. I called Sony” - @Ice_95

Problem ID: 6663232021982518323
Entered by: Ben Simo

Disk space issue

“Someone really needs to sense check these error messages...” - @niblick_iii

20091229

Problem ID: 4128738697523520413
Entered by: Ben Simo

Or you can add an exception...

“Mozilla Slowfox error..hmmm” - @BjornHansson

Or? To what is adding an exception an alternative?

Problem ID: 6009395423289651897
Entered by: Ben Simo

Failed to load and parse template

“Google CityTours Error Message: Failed to Load and Parse Template!” - @ragsontherocks

Problem ID: 8903969217988727638
Entered by: Ben Simo

You may keep (null) (null) in your collection or drop it later

“@gowalla see twitpic for the error I just found. It ended up being a snowboard #1420 after my passport reloaded.” - @chadhutchins

“Sweet. Just picked up my first @gowalla (null) (null) item! Anyone else getting this error?” - @johngarcia

Problem ID: 6235384412672122384
Entered by: Ben Simo

Horrendous?

“Am I the only one that finds this dialog in YouTube.app horrendous?” - @dylancopeland

Software testing tools: Heuristics for recognizing problems.

Usability Heuristics

from Jakob Nielsen

• Visibility of system status Visibility of system status: The system should always keep users informed about what is going on, through appropriate feedback within reasonable time.
• Match between system and the real world Match between system and the real world: The system should speak the users' language, with words, phrases and concepts familiar to the user, rather than system-oriented terms. Follow real-world conventions, making information appear in a natural and logical order.
• User control and freedom User control and freedom: Users often choose system functions by mistake and will need a clearly marked "emergency exit" to leave the unwanted state without having to go through an extended dialogue. Support undo and redo.
• Consistency and standards Consistency and standards: Users should not have to wonder whether different words, situations, or actions mean the same thing. Follow platform conventions.
• Error prevention Error prevention: Even better than good error messages is a careful design which prevents a problem from occurring in the first place. Either eliminate error-prone conditions or check for them and present users with a confirmation option before they commit to the action.
• Recognition rather than recall Recognition rather than recall: Minimize the user's memory load by making objects, actions, and options visible. The user should not have to remember information from one part of the dialogue to another. Instructions for use of the system should be visible or easily retrievable whenever appropriate.
• Flexibility and efficiency of use Flexibility and efficiency of use: Accelerators -- unseen by the novice user -- may often speed up the interaction for the expert user such that the system can cater to both inexperienced and experienced users. Allow users to tailor frequent actions.
• Aesthetic and minimalist design Aesthetic and minimalist design: Dialogues should not contain information which is irrelevant or rarely needed. Every extra unit of information in a dialogue competes with the relevant units of information and diminishes their relative visibility.
• Help users recognize, diagnose, and recover from errors Help users recognize, diagnose, and recover from errors: Error messages should be expressed in plain language (no codes), precisely indicate the problem, and constructively suggest a solution.
• Help and documentation Help and documentation: Even though it is better if the system can be used without documentation, it may be necessary to provide help and documentation. Any such information should be easy to search, focused on the user's task, list concrete steps to be carried out, and not be too large.

Consistency Heuristics

from James Bach
and Michael Bolton

-F amiliar Familiar: The product is not consistent with the pattern of any familiar problem.
E xplainable Explainable: The product is explainable.
W orld World: The product is consistent with the real world.
H istory History: The present version of the product is consistent with past versions of it.
I mage Image: The product is consistent with an image that the organization wants to project.
C omparable Products Comparable Products: The product is consistent with comparable systems.
C laims Claims: The product is consistent with what important people say it’s supposed to be.
U ser Expectations User Expectations: The product is consistent with what users want.
P roduct Product: Each element of the product is consistent with comparable elements in the same system.
P urpose Purpose: The product is consistent with its purposes, both explicit and implicit.
S tatutes Statutes: The product is consistent with applicable laws.

FAILURE Heuristics

from Ben Simo

F unctional Functional: The error detecting, reporting, and handling functions properly.
A ppropriate Appropriate: Errors are reported at the appropriate time in an appropriate manner.
I mpact Impact: The impact of the failure is communicated to those impacted.
L og Log: The error is appropriately logged; or not logged.
U ser Interface User Interface: The error is reported in the user interface in terms that the user understands.
R ecovery Recovery: The user is informed of what they need to do to recover from the error.
E motions Emotions: The error handling and reporting has a positive influence on user emotions.

Security Vulnerabilities

the OWASP Top 10

1. Injection Injection: Injection flaws occur when untrusted data is sent to an interpreter as part of a command. The attacker’s hostile data can trick the interpreter into executing unintended commands or accessing data without authorization.
2. Broken authentication and session management Broken authentication and session management: Application functions related to authentication and session management are often not implemented correctly, allowing attackers to compromise passwords, keys, or session tokens, or to exploit other implementation flaws to assume other users’ identities.
3. Cross-Site Scripting Cross-Site Scripting (XSS): XSS flaws occur whenever an application takes untrusted data and sends it to a web browser without proper validation or escaping. XSS allows attackers to execute scripts in the victim’s browser which can hijack user sessions, deface web sites, or redirect the user to malicious sites.
4. Insecure Direct Object References Insecure Direct Object References: A direct object reference occurs when a developer exposes a reference to an internal implementation object, such as a file, directory, or database key. Without an access control check or other protection, attackers can manipulate these references to gain unauthorized access to data.
5. Security Misconfiguration Security Misconfiguration: Good security requires having a secure configuration defined and deployed for the application, frameworks, application server, web server, database server, and platform. Secure settings should be defined, implemented, and maintained, as defaults are often insecure. Additionally, software should be kept up to date.
6. Sensitive Data Exposure Sensitive Data Exposure: Many web applications do not properly protect sensitive data, such as credit cards, tax IDs, and authentication credentials. Attackers may steal or modify such weakly protected data to conduct credit card fraud, identity theft, or other crimes. Sensitive data deserves extra protection such as encryption at rest or in transit, as well as special precautions when exchanged with the browser.
7. Missing Function Level Access Control Missing Function Level Access Control: Most web applications verify function level access rights before making that functionality visible in the UI. However, applications need to perform the same access control checks on the server when each function is accessed. If requests are not verified, attackers will be able to forge requests in order to access functionality without proper authorization.
8. Cross-Site Request Forgery Cross-Site Request Forgery (CSRF): A CSRF attack forces a logged-on victim’s browser to send a forged HTTP request, including the victim’s session cookie and any other automatically included authentication information, to a vulnerable web application. This allows the attacker to force the victim’s browser to generate requests the vulnerable application thinks are legitimate requests from the victim.
9. Using Components with Known Vulnerabilities Using Components with Known Vulnerabilities: Running software components with known vulnerabilities can compromise the vulnerable components and anything those components can access -- undermining defenses.
10. Unvalidated Redirects and Forwards Unvalidated Redirects and Forwards: Using untrusted data, without validation, to determine the destination of redirects and forwards can enable attackers to redirect victims to phisihing or malware sites.