Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×
Technology

Simple Systems Have Less Downtime (gkogan.co) 123

Greg Kogan, writes in a blog post: The Maersk Triple-E Class container ship is 1,300 feet long, carries over 18,000 containers across 11,000 miles between Europe and Asia, and... Its entire crew can fit inside a passenger van. As a former naval architect and a current marketing consultant to startups, I found that the same principle that lets a 13-person crew navigate the world's largest container ship to a port halfway around the world without breaking down also applies to startups working towards aggressive growth goals: Simple systems have less downtime.

Ships contain simple systems that are easy to operate and easy to understand, which makes them easy to fix, which means they have less downtime. An important quality, considering that "downtime" for a ship could mean being stranded thousands of miles from help. Take the ship's steering system, for instance. The rudder is pushed left or right by metal rods. Those rods are moved by hydraulic pressure. That pressure is controlled by a hydraulic pump. That pump is controlled by an electronic signal from the wheelhouse. That signal is controlled by the autopilot. It doesn't require a rocket scientist or a naval architect to find the cause of and solution to any problem.

This discussion has been archived. No new comments can be posted.

Simple Systems Have Less Downtime

Comments Filter:
  • Duh! (Score:5, Insightful)

    by oldgraybeard ( 2939809 ) on Wednesday March 04, 2020 @07:07PM (#59797906)
    OK who needs to be whacked with the clue stick?

    Just my 2 cents ;)
    • OK who needs to be whacked with the clue stick?

      Give Greg a break, he needs this -- he writes a blog. :-)

    • by Revek ( 133289 )
      No shit!
    • Re:Duh! (Score:5, Insightful)

      by sjames ( 1099 ) on Wednesday March 04, 2020 @07:33PM (#59797968) Homepage Journal

      Apparently, way too many modern software developers. Especially the ones who use a whole framework with extra libraries when a single line of Javascript could have done the job had they actually understood the job in the first place.

      Some are even worse. I have seen frameworks and javascript used to render static pages.

      Those people may need more than one whack.

      • Re:Duh! (Score:5, Funny)

        by ArchieBunker ( 132337 ) on Wednesday March 04, 2020 @07:48PM (#59797994)

        Wait you're telling me you don't need a virtual python environment inside a docker container inside a virtual machine slice?

      • by gweihir ( 88907 )

        Apparently, way too many modern software developers. Especially the ones who use a whole framework with extra libraries when a single line of Javascript could have done the job had they actually understood the job in the first place.

        Some are even worse. I have seen frameworks and javascript used to render static pages.

        Those people may need more than one whack.

        Indeed. In an academic lab were students close to getting their CS BSc had to write a small web-application in groups, one of the teachers did statistics on the number of direct and indirect dependencies and the number of people that were involved by extension. Worst case was something like 4000 dependencies and 800 people. None made it significantly below 1000 dependencies. That is not just bad engineering, that is completely insane!

        We will have to scrap all of this trash eventually and I do not mean the a

        • by Kjella ( 173770 )

          Indeed. In an academic lab were students close to getting their CS BSc had to write a small web-application in groups, one of the teachers did statistics on the number of direct and indirect dependencies and the number of people that were involved by extension. Worst case was something like 4000 dependencies and 800 people. None made it significantly below 1000 dependencies. That is not just bad engineering, that is completely insane!

          If their web app ran on Linux, then the last kernel release had 1800 contributors alone and I doubt the numbers are lower for Windows and Apple. Is that a bad thing? Probably not. Some of these things are massive toolboxes and even though all you need is a hammer it's not a big practical deal. Other times it's a framework that completely locks you into doing things their way, there's a lot of "quality" to these numbers too not just quantity.

          • The risk is proportional to the number of users. Linux has more users, and so the risk is less. On the other hand, if you depend on 2 dozen projects, each with its own author, and none with more than a handful of users, then you're likely to have a problem.

      • Up through the 90s, if you gave a presentaiton on anything but acetate viewgraphs you were asking for power point to lock up or windows to crash.

        In the 70s and 80s a lot of people liked Fords precisely because they had carburetors, mechical ignition timing, and no computers and you could actually repair everything without a technical training course from the manufacturer.

        Boeing, back when it was run by engineers instead of accountants, was the last one to switch from mechanical (cables) controls to fly by

        • But the first three of these are now cases where complexity was mastered and technology finally became reliable.

          The same is true for the fourth as well. One has to wonder why, then, is it not being implemented properly or reliably?

        • by sjames ( 1099 )

          The difference is that the fuel injected computer controlled engines actually do run more efficiently, with less emissions, and more reliably, so the complexity has a distinct payback. The dynamically rendered static page shows no benefit for the added complexity. Think of it as Occam's razor for engineering.

          Also, much of the added complexity is well encapsulated in the ECU. Outside of the ECU things are actually simpler than the mechanical linkages you might see in the old Ford.

          On the flip side, we have el

          • The dynamically rendered static page shows no benefit for the added complexity.

            The benefit of a dynamically generated static web page to a publisher is that the publisher can measure the audience, display targeted advertising, and realize enough revenue to keep paying the writing and hosting bill. The benefit to the audience is that the publication continues operating instead of shutting down due to bankruptcy liquidation.

        • There is a very simple way to make eVoting reliable.

          Let the person vote on the evoting machine at the polling booth and then have the machine printout a paper ballot with what they selected. They can verify thats what they wanted and then put the ballot into a ballot box.

          Do the tabulation elecronically and then count 10% of the physical boxes from each polling station. if numbers are statistically out of whack then count all the boxes else just announce the electronic count.

          This takes away the fear of the s

      • Re:Duh! (Score:4, Interesting)

        by KermodeBear ( 738243 ) on Wednesday March 04, 2020 @11:16PM (#59798432) Homepage

        Ah, yes. "Static Apps." The new rage.

        I forget the product, if I remember I'll come back and post a link, the documentation - purely static content - is a NodeJS application deployed to Netlify. So you go to the documentation link, your browser downloads and interprets dozens of javascript files, all to render... what? Nothing that you can't do with a single HTML file and a bit of CSS to make it pretty. Two files. One, if you want to embed the CSS.

        Completely unnecessary.

        • Re: (Score:2, Funny)

          by Anonymous Coward

          Completely unnecessary.

          Au contraire!

          Billable project hours, Baby!

      • Agreed.
        I think the problem is how software engineering is taught.
        Primarily with Object Oriented Programming. Where we are taught to build abstraction for most of the process.
        Now there isn't anything wrong with OO Programing, however experience has shown me, that being too much a stickler for proper OO Form will code yourselfs in overly complex systems because you are making too many Complex objects that become difficult to debug, and often harder to fix, when it fails on one condition but works for others.

        S

    • Re:Duh! (Score:5, Interesting)

      by AK Marc ( 707885 ) on Wednesday March 04, 2020 @08:13PM (#59798052)
      I've seen people make some of the most complex designs possible for "uptime". Rather than making it simply, and redundant, it's double-redundant and with extra features for uptime that result in multiple single points of failure. If the LAG fails, all links go down. If the BGP fails, all the links go down. If the STP fails, all the links go down. Each of those is supposed to improve redundancy, but putting so many redundant systems on the same system makes it trivial to make an error in one, and that one can bring the whole thing down.

      Once, when I was someplace, I was fired. Turns out, the day after I took a look at their redundancy systems (a design, I never logged into anything or actually touched it) and pointed out an obvious single point of failure in their routing configuration (pushed there by someone who had since been promoted beyond his ability, not that he did his previous job well), the routing protocol had an error and took down their "redundant" system. I think the guy who set it up in the first place scape goated me.

      There are piles of clueless people out there who think more redundancy is better, and they add so much redundancy it fails.
      • Re:Duh! (Score:4, Informative)

        by onepoint ( 301486 ) on Wednesday March 04, 2020 @10:39PM (#59798352) Homepage Journal

        I was one of those coders that practiced the dark arts of redundancy and failovers. redundancy is a natural way of making sure failures and preventive maintenance can be done ( think hot swapping on raid's )
        Failover's are duplicate system ( sometimes lighter ) to take on whatever happens when a system part fails.

        Side Note : On a yacht that I and the owner are good friend, I had him install a bank of oil filters on a set 3-way valves ( from the line to the filter then from the filter to the line ). The captain at first did not like it, but then came the day when the hours on the filter had to be swapped out, the engineer moved it from 1 to the next, wrote in the log book the hour and it was done after it cooled down right when they docked. it saved time, reduced the risk of spillage and it has build in redundancy. We are exploring this if this is a good idea on the fuel system.

        On topic :
        The first goal is you need to always learn is to get a working version that is crashing about every hour or so under light to medium loads.
        Now you build over the first and simple failover ( server 2 )
        go back to server 1 fix the problem, test and pour yourself a beer, change back to server 1 and do the code change in server 2
        back and forth with simple failovers till you have a good beta product... then the fun kicks in
        Want 7 different types of redundancy... no problem, follow these steps
        server 2 is the test bed, let's hit it with a super heavy load and break it.
        great we broke it, fix the issue, use that code on server 1 and break server 2 again
        perfect now we have a system tested to a new working level that won't break so easy.
        now install server 3 with the same code on server 2
        Now on server 2 install first redundancy, with it switching to server 3 as the redundant system ( or failover )
        let's think of that san's .. slam server 2 and then try to pull the plug connecting the sans to server 2 and see if server 3 can take over ( this was my favorite test, because I alway think of 9/11 and the loss of a complete data center )

        keep testing on the physical fixes code, once it works and it fails over properly, then move the code to server 1

        1 redundant system at a time

        test to break, and when it breaks, figure out what did it. but you can not do this in a parallel process, this is a sequential process. before you know it, you have low code bloat that is well documented. and because it's designed with failover and redundancy, you can mirror the servers to other sites ( that brings it's own latency issue problems )

        in reference to the latency issues... I was called into a meeting by a friend that was having this problem ... the solution was rather simple ( it's a catalog purchase company with warehouse all over the USA ). the purchase of any item from the catalog was done almost in a static mode with few to little updates, most if not the entire web transaction was done in memory to keep the speed and the consumer happy avoiding any lag. the inventory updates were done right after the transaction processed closed ( billing ) , and was sent to order picking. worked really well until amazon, now they handle everything except the catalog.

      • by tlhIngan ( 30335 )

        I've seen people make some of the most complex designs possible for "uptime". Rather than making it simply, and redundant, it's double-redundant and with extra features for uptime that result in multiple single points of failure. If the LAG fails, all links go down. If the BGP fails, all the links go down. If the STP fails, all the links go down. Each of those is supposed to improve redundancy, but putting so many redundant systems on the same system makes it trivial to make an error in one, and that one ca

        • by AK Marc ( 707885 )
          Google got redundancy right when they started. They had redundant systems working in a redundant pile. They didn't spend lots on the gear, but made their own RAID. Essentially piles of PCs serving up what they are asked for. When one dies, it's routed around. And the hardware was cheap. But there was lots of it, and proprietary redundancy.

          As for the mainframe example, I've not worked on those, but something like a Cisco Catalyst 5500 is highly redundant and highly available. The chassis is wires and
    • "OK who needs to be whacked with the clue stick?"
      Most people in the IT department where I work. Although this really extends to many IT functions beyond my place of employment and likely beyond the world of IT.

    • You've never worked in companies older than 5 years then? They're riddled with legacy baggage, successive managers and developers piling on more kit to solve problems no one has, no one ever stands back and says "Stop this sh*t! Let's simplify.". Simplification costs time and money, easy to just add another system and let it feed from the legacy baggage. Too many companies leave IT to it's own devices, biz and IT rarely talk to each other than for the biz to demand IT install X software.

      I've worked in a pla

      • The root problem is that every single thing you need done is a slight change in the existing system that doesn't warrant scrapping the old and building something new. In combination, they would easily warrant the deployment of a new system, but each by themselves does not.

        Try to get this past the beancounters. And take a camera with you, we could all use a good laugh.

    • In direct context of the op...the designers of modern US naval vessels, for one group?

    • by shanen ( 462549 )

      Mod parent up, though I think a "Duh!" mod would be better than "Insightful".

  • Right, but... (Score:5, Insightful)

    by Parker Lewis ( 999165 ) on Wednesday March 04, 2020 @07:11PM (#59797916)
    Just remember to say in the press release, that instead a bunch of "IF" statements, you have an AI.
    • We have replaced all the GOTO statements with our new proprietary revolutionary AI (case statements)

      Just my 2 cents ;)
      • We have replaced all the GOTO statements with our new proprietary revolutionary AI (case statements)
        Just my 2 cents ;)

        I imagine this involves far fewer Velociraptors [xkcd.com] ...

      • by plopez ( 54068 )

        our is much more advanced. we use computed double look up tables based on exposed reference addresses.

  • by bobbied ( 2522392 ) on Wednesday March 04, 2020 @07:21PM (#59797940)

    So the rudder is a simple mechanical system? Um, not so blooming fast. Sure, fault isolation may be easy with common hand tools, but fixing some of this stuff is *not* always simple and straight forward. Hydraulic cylinders of the size needed and pumps to move the oil around are not simple to fix. So what do you do? Throw in a backup system, which just complicates the whole mess, but what ya going to do. What about the engine banging away deep in the stern? The fuel and emissions management systems are *far* from simple, and never will be.

    But it's not the rudder or engine that usually has issues, it's the electronic equipment and electrical systems which are literally all over the place that concern me. IF that rudder works great, but the navigation system won't boot what are you going to do? Grab that sextant your watch and start making fixes that way? That's not simple, nor easy.

    I think they need to think carefully about what they mean when they say "simple" because the navigation and communication systems are anything but simple.

    • Why wouldn't the pump be a simple fix? It was designed to be serviceable after all. How complicated can the backup system possibly be? Throw a few switches and valves and its running. I don't think ships even have emissions systems as they create incredible amounts of pollution.

      • Sadly, we don't a have a set of plan's.

        But Maersk line vessels are basically the volvo's of the sea, they work and don't fail. they are as you said, well designed to be serviceable. and they do have multiple redundancy and failovers.

        could you steer the ship without power on the bridge. I would not be surprised if there is a chain or cable wire link in the system down in the engine room area. might not work well, but you would be able to safely control the vessel until the tugs arrived.

      • by barakn ( 641218 )

        Apparently you haven't heard about the new marine fuel sulfur limits, which are causing ships to either switch fuels or install scrubbers. https://www.eia.gov/todayinene... [eia.gov]
        Ironically one of the types of fuel is called bunker fuel.

      • Why wouldn't the pump be a simple fix? It was designed to be serviceable after all. How complicated can the backup system possibly be? Throw a few switches and valves and its running. I don't think ships even have emissions systems as they create incredible amounts of pollution.

        Just spitballing from the couch... But...

        I imagine that the biggest problem facing sailors out at sea is not knowing what needs to be fixed, but having the equipment needed to do the work and the necessary hands to get it done. Some stuff used in ships is extremely large and heavy so it may be clear that some bearing is bad, but if you have to remove a 2 tone bearing cap and then slide the 1,000 lb bering off, wrestle the new one out of storage and into place without killing somebody.

        Modern ships do have

    • by DarkOx ( 621550 )

      The most reliable system is as complex as its required to be and no more so.

      The more "plumbing" there is the more potential for the works to get gummed up; by the same token saying you don't need all those sat-com and navigation equipment means other problems; pretty easy to get lost with watch and sextant. The best design is the one that meets all the requirements without trying to go further.

      • "The best design is the one that meets all the requirements without trying to go further."

        But the requirements are always being pushed further. Think of all the new technology in vehicles these days: safety, emissions, ignition systems, etc. If each one was a simple modular component with a red or green light on it (indicating "ok" or "needs replacement") you could say that might be simple as well. But weight, esthetics, cost to manufacture, size are also requirements which can complicate the design. Th

        • by DarkOx ( 621550 )

          I don't disagree. I have a car with a lot of electronics and extras now. Its been to the dealer multiple times for various things. Including a failed map update for the GPS that left a lot of the head unit non-functional. All down time. Problems I have never had with late-80s and early-90s vintage cars I drove in highschool and college.

          OOTH. Uptime is important but I don't have a specific requirement. I can always get a rental while the dealer fixes my car. I live in fairly rural area but its not exac

    • So the rudder is a simple mechanical system? Um, not so blooming fast.

      I'm not a mechanical engineer and yet, I too can imagine counterarguments. In my simple head, what's going to fail on a rudder? I dunno, a blown hose, a bent rod, or a failed rudder bearing? Some of those are going to be field serviceable, other I really doubt it. Let's take the push rods. If one snaps, jams, or bends, I find it hard to believe you've got a spare and/or the winch to wrestle it into place. But maybe you do, I'm not a sailor. Maybe when you had 30 salts on the ship instead of 11, you had enou

    • Saying simple systems are in fact very complicated doesn't refute the point that simpler systems are easier to keep running.

      I'm not even sure what your point is, maybe you'd welcome a DevOps team giving your ship a once over, because it's already complicated, what's a little Python going to hurt.

    • Yeah... that was a big red flag for me. A “simple” system can still optimize power from the propellers on either side to maximize forward and turning efficiency.

      What a simple system cannot do is have two hydraulic pumps (plus backup), normally operating dedicated to a single direction, and then when one pump is down, operate several valves to allow the remaining pump to maintain direction control. Bonus points if you can find a redundant path for the mechanical linkages, and add in an ipad app

  • Gall's Law (Score:4, Informative)

    by steveha ( 103154 ) on Wednesday March 04, 2020 @07:45PM (#59797990) Homepage

    A complex system that works is invariably found to have evolved from a simple system that worked.

    https://en.wikipedia.org/wiki/John_Gall_(author)#Gall's_law [wikipedia.org]

    P.S. I am also a fan of a saying often attributed to Einstein:

    "Everything should be as simple as possible, but no simpler."

    https://quoteinvestigator.com/2011/05/13/einstein-simple/ [quoteinvestigator.com]

    • by Jahta ( 1141213 )

      I've always liked this Sir Anthony Hoare quote from his Turing Award Lecture [fsu.edu]:

      "I conclude that there are two ways of constructing a software design: One way is to make it so simple that there are obviously no deficiencies and the other way is to make it so complicated that there are no obvious deficiencies.

      The first method is far more difficult."

  • by gweihir ( 88907 ) on Wednesday March 04, 2020 @07:57PM (#59798024)

    KISS is the mantra of all good engineers for a reason.

    Of course, most people writing software are neither engineers nor good at what they do. Hence what they produce is overly complicated, unreliable, insecure and often slow. Finding simple solutions is much harder than creating a complex mess.

    • by mr.morbo ( 6346556 ) on Wednesday March 04, 2020 @08:25PM (#59798078)

      In the software world, at least, you have a largely untrained self-taught group of people standing on the shoulders of giants to get anything done. They seem to not only misunderstand why complexity is bad but to view it as some badge of their elite skills.

      I'm a qualified hardware engineer and I can tell you even educated people who are experts in my field fall into that trap. It's so easy to design a complex system and then need to keep adding special cases for unexpected states through the system caused by unexpected inputs until the design is a complete mess, 10x over the BOM budget and only just works well enough you might be able to sell it.

      Simplicity is king, and being able to identify where it is needed and how to achieve is a skill that makes it look like you're not as productive as the guy next to you who churns out volumes of complex buggy designs every day.

      • by gweihir ( 88907 )

        Simplicity is king, and being able to identify where it is needed and how to achieve is a skill that makes it look like you're not as productive as the guy next to you who churns out volumes of complex buggy designs every day.

        And that certainly is one of the factors here. Throwing more code at a problem is easy, simple, mindless and gives you good productivity metrics. Well, at least if those metrics are completely broken and they usually are for software.

      • I'm a qualified hardware engineer and I can tell you even educated people who are experts in my field fall into that trap. It's so easy to design a complex system and then need to keep adding special cases for unexpected states through the system caused by unexpected inputs until the design is a complete mess, 10x over the BOM budget and only just works well enough you might be able to sell it.

        I've worked with plenty of "qualified hardware engineers". You are all the same. "System bursts into flame occasionally? No problem, the software guys will patch the firmware to stop the fire from spreading!"

        You leave your shitty design mistakes all over the place, and fully expect 'software' to fix them all... somehow. "No, we can't change the hardware, the design was already accepted. Fix it in software." Excuse me, wasn't the design of the software accepted at the same time!?

      • The fewer the pieces the better it is. Long complex chains of automation, particularly of semidigital,semianalogue systems are difficult to debug. Agreed.

      • I agree about the badge of honour thing. I've seen designs so complex that "only John knows the full story". It turns out John was also the architect of this doom, and seems fearful of the future so has built his empire to avoid getting fired. John also fails to write any of this down, and also fails to try to tidy up any of the rough edges, so things never improve and no one can ever help out.

        In such places, I've also usually found the PHBs prefer systems too complex for them to understand. If they can't u

      • Largely because of management. Management has no patience for good design or engineering.

        That's why I ignore everyone who tries to tell me what my priorities are. I know what they are. I can smile and nod with the rest, but at the end of the day our conversations have zero impact on what I work on.

        I limit the amount of information I deliver up the food chain because management uses information like this to come up with more "efficient" ways of doing things. As long as I keep them in dark about details, I in

      • by cusco ( 717999 )

        Simplicity is king

        Indeed, but end users don't seem to understand that it's better to have an occasional minor failure that is easy to diagnose and fix rather than a gigantic hair snarl of a system that only fails once in a blue moon but which takes the whole system down and entails hours/days to fix.

        I work in physical security (key cards, alarm systems, cameras, that stuff) and users complain insessently about the inflexibility of Lenel software (the 800 pound gorilla of the access control world). "It can'

    • It's funny how just about everyone will come up and offer a much more complicated solution to an already solved problem.

      I've had machines that I designed that run 24/7 for years, and when they start to have issues it's amazing how everyone comes out of the woodwork to tell me how it needs to be redesigned.

      "I think maybe a couple air cylinders on a hinge, and a prox switch on there will make this much more reliable, something to push it. You know what I mean? Like a flap on here, so if it gets crooked, it pu

      • by gweihir ( 88907 )

        Ah, yes, morons that cannot listen to instructions, that cannot read a manual, that do not understand how things work but believe otherwise and when it all goes wrong it is never their fault. You find these on all levels, unfortunately. Dunning-Kruger effect at work.

  • Its much more difficult to test complex systems because there are too many possible combinations of inputs and internal states. In addition the more tools that are used, the higher the chance that one of those tools will have a bug or that an interface will be misused. Debugging complex systems is much more difficult because often it is not obvious what part of the system failed.

    An additional problem is that complex systems that rely on a large number of components can be very difficult to upgrade. Good

    • by AK Marc ( 707885 )

      Its much more difficult to test complex systems because there are too many possible combinations of inputs and internal states.

      It's not like Intel would test a CPU, pass the tests, then start selling it and find it had an error in the FPU. https://en.wikipedia.org/wiki/... [wikipedia.org]

    • Its much more difficult to test complex systems because there are too many possible combinations of inputs and internal states. In addition the more tools that are used, the higher the chance that one of those tools will have a bug or that an interface will be misused. Debugging complex systems is much more difficult because often it is not obvious what part of the system failed.

      It's worse than that. Every branch doubles the number of internal states. In electronics this can lead to strange behaviours like oscillation, unexpected RF emissions, etc. In software, unexpected crashes, races, etc.

      And the more complex the system the more likely that the failure reported is just the messenger for a long chain of cascading failures that passed through the system without being noticed by earlier layers.

      In the boat example this might be the rudder is at full portside lock and the autopilot t

  • Those are not simple.

    Oh, also, switch off the radios and satellite Internet with the live weather reports and super-computer forecasted weather forecasts.

    And of course, the crew definitely can't have any iPads or iPhones. The "simplicity" of those is based on millions of lines of complex computer code and billions of transistors in super-complex designs. Not to mention a shitload of tiny, complex, intricate physical parts..
  • Over in the land of tech we can take comfort in the fact that adding an abstraction layer solves any problem; except complexity.
    • Yes and no; it might reduce end-user complexity, but it does not make things like input validation and corner cases less important.

      Not a software guy, but I remember writing a perl script to take a stupid amount of data and make it less stupid so graphical tools could more easily process it. While my stupid (very stupid) script was effective at its task, it was neither an elegant (aka simple) approach, nor was it practical for actual use. It still simplified the problem...

  • Yah, I sure the whole world is surprised by this. Sounds like one of the Pentagon's billion dollar studies to show the moon is not made of cheese.
    • About 40-50 years ago, DARPA’s predecessor agency calculated the fault matrix for parallel redundant systems based on a lot of data (and math). 1+1 = 1.8, ..., 5+1 = 1.1. It is interesting how these studies and the math they established still apply today.

  • More secure too (Score:4, Interesting)

    by Bert64 ( 520050 ) <bertNO@SPAMslashdot.firenzee.com> on Wednesday March 04, 2020 @09:55PM (#59798276) Homepage

    Simple systems are also more secure...
    The operators understand how they work, and can quickly identify if something unusual is happening. An attacker has a much smaller footprint to attack.

    • System A is a database with a web front-end.

      System B is based on System A, but adds authentication and transport security.

      System A is simpler than System B.

      System B is more secure.

      • by Bert64 ( 520050 )

        System A has no authentication, thus unauthenticated access is "by design" and not a bug. Whoever deploys such a system does so knowing its limitations and accepts them.
        System B implements authentication and transport security - additional code where bugs could be found and which could be misconfigured.

  • "Simplicity is prerequisite for reliability [wikiquote.org]." -- Edsger W. Dijsktra (1975)

    Wisdom that is lost among many of current designers, developers and engineers ...

  • ... one of those hydraulic cylinders seizes up and you discover that you need 14 people to disconnect it and muscle it around.

  • Take the ship's steering system, for instance. The rudder is pushed left or right by metal rods. Those rods are moved by hydraulic pressure. That pressure is controlled by a hydraulic pump. That pump is controlled by an electronic signal from the wheelhouse. That signal is controlled by the autopilot. It doesn't require a rocket scientist or a naval architect to find the cause of and solution to any problem.

    So... it's a simple system controlled by some undefined level of AI? Yeah, that's not as simple as they claim. Does their crew contain a software engineer?

    • Traditional "autopilots" on planes and ships are nothing more than a simple negative feedback loop that maintains heading, speed, and (for boats) altitude.

      Perfect? No. But certainly good enough to let you rest during the boring parts of a trip when there is nothing but blue skies or open ocean in front of you.

  • Yeah, if I have less functionality, less can break ... because less can be done in the first place!

    You know what? Why not go all the way?
    Here, take this dead featureless cube of pure silicon as your new computer!
    It will never ever stop working! Ever.

    What features does it have? ... NONE!

    It is your perfect ideal of simpleness that you've got wet dreams about when you are afraid of the world being too complex for you again!

    Genius!

    Too bad in reality, things have to do things, and that requires complexity and co

  • Yeah, it seems over time the trend in software technology is to add more and more layers where computing systems can break. As a result they often do. Sure you get more efficiencies out of the tech, but troubleshooting is a lot more difficult. You get a break in a major production system and many dozens of people join in the call, when actually you only need the one or two knowledgeable about the particular layer that broke. Twenty year old technology is often far more reliable.
    • You get better efficiency from the software developers, not from the tech.

      I've not seen an efficient website since Craigslist.

    • by cusco ( 717999 )

      DNS and routing tables are a lot more than 20 years old but I can't count the times that I've seen an error there take down an entire enterprise and take hours and scores of people to figure out.

  • The lesson to learn is that if you put everything in containers, you can ignore the complexities inside. /s
  • I call the article describtion one big bull shit! There is nothing simple in what is described. Being easy to fix does not mean that the downtime is minimal. It means that downtime is limited. And I don't agree that the described system which includes the autopilot is easy to fix. I don't agree that it is easy to diagnose. This is play bull shit.
  • "Take the ship's steering system, for instance. The rudder is pushed left or right by metal rods. Those rods are moved by hydraulic pressure. That pressure is controlled by a hydraulic pump. That pump is controlled by an electronic signal from the wheelhouse. That signal is controlled by the autopilot. It doesn't require a rocket scientist or a naval architect to find the cause of and solution to any problem."

    uh, that is simple? i would call that 'complex', we're talking about a rudder. a simple rudder is w

    • by rho ( 6063 )

      For a boat the size of a container ship, yeah, that's pretty simple. TFA mentions that should all that fail, you can attach a chain to the rudder and manhandle it that way if all else fails.

      You should look at the wind vane self-steering devices for sailboats. They are fascinating devices that are pretty fricking complex, but they're beloved by sailors because they are made up of relatively simple parts that could be fashioned out of bits and ends you have on hand if something breaks. Complexity and simplici

    • by cusco ( 717999 )

      Autopilot on a ship is actually only one step above tieing off the wheel. Its instruction set is essentially "Keep on this bearing and speed until I turn you off."

  • The more they overthink the plumbing the easier it is to stop up the drain.

  • Just begging for trouble ...

  • Well,.. yeah.. simple systems that have gone through decades or centuries of iterations tend to not break down. When you look at those ships, they are the product of countless failures and refinements that have produced the current designs... in other words, they are not stable because they are 'simple', they are stable because they are old and well vetted.

    Granted for developing new technology, starting simple is still probably better than starting complex, but the lesson here is really 'test, test, test
  • I design and build 3D printers. One of the trends that has been gaining popularity in the hobby in the last couple years is auto tramming systems for print beds. The idea is to lift the bed using three screws and motors while a sensor on the extruder carriage checks the bed position and firmware on the controller decides which screw to turn and by how much. If you look at the popular 3D printing forums you'll find a lot of people having trouble setting up those systems and keeping them working. You can

The explanation requiring the fewest assumptions is the most likely to be correct. -- William of Occam

Working...