,S(TW>E FAILS ALL ! "T  BILLIONS ( "TS A
"D1 QUIETLY1 9 WAYS NOBODY NOTICES4 ,B A
H&;L ( BUGS CROSS$ OV]3 !Y KILL$ PATI5TS
9 _! HOSPITAL B$S1 VAPORIZ$ ROCKETS 9
MID-AIR1 ]AS$ COMPANIES 9 =TY-FIVE
M9UTES1 & GR.D$ E FLI<T ON A 3T95T4 ,^!
>E ! BUGS FAM\S 5 TO E>N "NS  ! 9DUCTEES
( ! ,S(TW>E ,BUG ,HALL ( ,9FAMY4 ,? IS !
C.TD[N1 F _?#AJ TO _?#A1 ESCALAT+ BY !
DAMAGE D"O4
,! "NPLATE3 A LIT]AL BUG "<#AIDG">
.<FIGURE3 ,! PAGE T "ND A FIELD 
OP]ATORS TAP$ ! MO? 9TO ! LOG & WROTE
8,F/ ACTUAL CASE ( BUG 2+ F.D0 "<,,U
,NAVAL ,HI/ORICAL ,C5T]1 PUBLIC
DOMA9">.>
,2F ! C.TD[N1 ! PLAQUE AT ! DOOR4 ,ON #I
,SEPTEMB] #AIDG1 OP]ATORS ( ! ,H>V>D
,M>K ,,II ELECTROME*ANICAL COMPUT] F.D !
MA*9E MALFUNC;N+4 ,TRAC+ ! FAULT TO
RELAY _?#GJ1 PANEL ;,F1 !Y OP5$ X & F.D
! CAUSE3 A MO?1 D1D 2T ! 3TACTS4 ,!Y
TAP$ X 9TO ! LOGBOOK & WROTE1 FAM\SLY3
8,F/ ACTUAL CASE ( BUG 2+ F.D40 ,! PAGE
N[ LIVES AT ! ,SMI?SONIAN4
,"O H"O/ CORREC;N TO ! LEG5D3 8BUG0 = A
TE*NICAL DEFECT PR$ATES COMPUT+ BY
DECADES  ,$ISON US$ X 9 ! #AHGJ;S  &
,GRACE ,HOPP]1 (T5 CR$IT$ ) F9D+ ! MO?1
POPUL>IZ$ ! /ORY R ?AN MAK+ ! LOG 5TRY
H]F4 ,B ! LEG5D E>N$ XS PLACE3 ! MO?
MADE 8DEBU7+0 LIT]AL1 & X REMA9S ! ONLY
BUG ^: REMA9S >E 9 A MUSEUM4
,N[  ! 9DUCTEES1 RANK$4
#AJ4 ,M>S ,PA?F9D]  ! BUG DEBU7$ F #ADJ
MILLION MILES AWAY "<#AIIG">
,! ONLY 5TRY ^: FIX HAPP5$ ON ANO!R
PLANET4 ,"DS AF L&+ 9 ,JULY #AIIG1 !
,PA?F9D] L&] 2GAN RESETT+ XF MID-TASK 
XS ,VX,"WS OP]AT+ SY/EM KEPT HITT+
WAT*DOG "T\TS4 ,ON ,E>?1 5G9E]S
REPRODUC$ X3 A L[-PRIOR;Y TASK HELD !
9=MA;N BUS :ILE A M$IUM-PRIOR;Y TASK
/>V$ ! HI<-PRIOR;Y "O  A PRIOR;Y 9V].N1
! SUBTLE/ "KN CLASS ( 3CURR5CY BUG4 ,!
FIX  5ABL+ PRIOR;Y 9H]IT.E  0 5COD$ &
RADIO$ #ADJ MILLION MILES TO A MA*9E
SITT+ ON ,M>S1 ": X TOOK E6ECT & 5D$ !
RESETS4 ,,NASA PUBLI%$ ! DIAGNOSIS 9 A
N[-FAM\S 5G9E]+ REPORT TITL$ 8,:AT
,R1LLY ,HAPP5$ ON ,M>S10 : REMA9S
REQUIR$ R1D+ 9 R1L-"T SY/EMS C\RSES4
#I4 ,! ,,AT@&,T CRA%  "O L9E ( ;,C
SIL;ES ,AM]ICA "<#AIIJ">
.<FIGURE3 ,S(TW>E N[ GU>DS ! SKY  9
#AIIJ & #AIIA1 X WD FAIL TWICE1 9 V
DI6]5T WAYS "<,,U ,>MY _/ PUBLIC
DOMA9">.>
,ON #AE ,JANU>Y #AIIJ1 E L;G-4T.E CALL 9
! ,UNIT$ ,/ATES 2GAN FAIL+  R\<LY HALF (
ALL ATTEMPT$ CALLS1 = N9E H\RS4 ,! CAUSE
0 A R\T9E S(TW>E UPDATE TO ,,AT@&,T'S
#D;,,ESS SWIT*ES3 9SIDE A SWIT* /ATE;T1
A BR1K 0 PLAC$ 9SIDE AN IF BLOCK  BR1K+
\ ( ! WR;G /RUCTURE & SKIPP+ ! CODE T
RESET AN ]ROR FLAG4 ,:5 "O SWIT* HIT A
FAULT & RESET XF1 X SIGNAL$ NEI<BORS X 0
R1DY = TRA6IC :ILE / COMPROMIS$2 EA*
NEI<BOR !N CRA%$1 RESET1 & PROPAGAT$ !
FAULT  A CASCAD+ FAILURE ACR #AAD
SWIT*ES4 ,"O KEY^W1 "O WR;G SCOPE1 & !
5TIRE NA;NAL TELEPH"O NET"W FOLD$ L
DOM9OES4 ,X REMA9S ! CANONICAL EXAMPLE (
:Y SWIT* FALL"? SEMANTICS >E FE>$4
#H4 ,M>S ,CLIMATE ,ORBIT]  @S#CBG
MILLION OV] A UNIT 3V].N "<#AIII">
.<FIGURE3 ,M>S ,CLIMATE ,ORBIT]  LO/ 2C
"O T1M US$ P.DS & ! O!R US$ NEWTONS
"<,,NASA_/,,JPL1 PUBLIC DOMA9">.>
,ON #BC ,SEPTEMB] #AIII1 ! ,M>S ,CLIMATE
,ORBIT] FIR$ XS MA9 5G9E TO 5T] ORBIT  &
BURN$ UP 9 ! ,M>TIAN ATMOSP"H 9/1D4 ,!
9VE/IGA;N F.D AN ALM 9SULT+ CAUSE3
,LOCKHE$ ,M>T9'S GR.D S(TW>E PRODUC$
IMPULSE DATA 9 P.D-=CE SECONDS2 ,,NASA'S
NAVIGA;N S(TW>E EXPECT$ NEWTON-SECONDS 
A FACTOR ( #D4DE ]ROR T PU%$ !
TRAJECTORY @9#EG KM TOO L[4 @S#CBG4F
MILLION & A N9E-MON? MIS.N1 DE/ROY$ N BY
A LOGIC ]ROR B BY NOBODY *ECK+ ! UNITS 9
! 9T]FACE SPECIFICA;N4 ,,NASA'S
PO/-MORTEM L$ DIRECTLY TO ! 8M1SURE;T
SY/EMS0 CLAUSES N[ /&>D 9 A]OSPACE
3TRACTS4
#G4 ,P5TIUM ,,FDIV  ! @S#DGE MILLION
R.D+ ]ROR "<#AIID">
,PR(ESSOR ,?OMAS ,NICELY NOTIC$ 8
COMPUTA;NS DRIFT+ SLI<TLY & TRAC$ X TO
,9TEL'S FLAG%IP ,P5TIUM3 ! *IP'S ,,SRT
DIVI.N ALGORI?M REF];ED A LOOKUP TABLE
9TO : FIVE 5TRIES _H N"E BE5 LOAD$  =
R>E OP]& PAIRS1 ! ,,FPU RETURN$ SUBTLY
WR;G QUOTI5TS1 (F BY AB "O "P 9 A ?\S&4
,9TEL'S F/ RESPONSE  8AN EXTREMELY R>E
3DI;N0  2CAME A CASE /UDY 9 H[ N TO H&LE
A DEFECT4 ,! PUBLIC =C$ A RECALL3 ,9TEL
(F]$ REPLACE;T *IPS TO ANY"O :O ASK$ &
TOOK A @S#DGE MILLION *>GE4 ,X 0 ! F/ "T
A H>DW>E BUG 2CAME FRONT-PAGE 3SUM]
NEWS4
#F4 ,>IANE #EJA  #CG SECONDS1 @S#CGJ
MILLION1 "O OV]FL[ "<#AIIF">
.<FIGURE3 ,DEBRIS F ,>IANE FLI<T #EJA  !
ROCKET TORE XF A"P 2C ( A REUS$ FUNC;N
"<,,ESA">.>
,ON XS MAID5 FLI<T  #D ,JUNE #AIIF  !
NEW ,>IANE #E ROCKET VE]$ (F C\RSE &
SELF-DE/RUCT$ #CG SECONDS AF LIFT(F1
TAK+ F\R ,CLU/] SATELLITES ) X4 ,!
CAUSE3 ! 9]TIAL REF];E S(TW>E _H BE5
REUS$ V]BATIM F ,>IANE #D4 ,! OLD]
ROCKET'S HORIZONTAL VELOC;Y FIT 9 #AF
BITS2 ! ,>IANE #E FLEW A DI6]5T
TRAJECTORY1 & ! R1L VALUE OV]FL[$ !
#AF-BIT SIGN$ 9TEG] ! CODE TRI$ TO 3V]T
X 9TO  AN OP]& ]ROR T KILL$ BO? R$UNDANT
COMPUT]S SIMULTANE\SLY4 ,! 9QUIRY'S
PHRASE 2CAME LEG5D>Y 9 S(TW>E CIRCLES3 !
CODE 0 CORRECT  = ! WR;G ROCKET4 ,CO/3
R\<LY @S#CGJ MILLION & YE>S ( PROGRAM
DELAY4
#E4 ,! ,MORRIS WORM  ! NI<T ! 9T]NET
BROKE "<#AIHH">
,ON #B ,NOVEMB] #AIHH1 A #BC-YE>-OLD
,CORNELL GRADUATE /UD5T "ND ,ROB]T
,TAPPAN ,MORRIS REL1S$ A PROGRAM T
EXPLOIT$ A BU6] OV]FL[ 9 F+]D & A
DEBUG-MODE HOLE 9 S5DMAIL4 ,X 0 SUPPOS$
TO SPR1D SL[LY & GAUGE ! 9T]NET'S SIZE 
B A DESIGN FLAW M1NT 9FECT$ MA*9ES KEPT
GETT+ RE-9FECT$1 EA* COPY SPAWN+ M
COPIES UNTIL HO/S COLLAPS$ "U _! [N
LOAD4 ,AN E/IMAT$ #F1JJJ MA*9ES  R\<LY
#AJ.0 ( ! 5TIRE 9T]NET  W5T D[N 9 A
NI<T4 ,MORRIS 2CAME ! F/ P]SON 3VICT$ "U
! ,COMPUT] ,FRAUD & ,ABUSE ,ACT4 ,E WORM
S9CE  ,,ILOVEY\1 ,CODE ,R$1 ,WANNA,CRY 
RUNS 9 8 %AD[4
#D4 ,KNI<T ,CAPITAL  ! @S#DDJ MILLION
TYPO "<#BJAB">
,ON #A ,AUGU/ #BJAB1 ,KNI<T ,CAPITAL
,GR\P  !N H&L+ @9#AJ.0 ( ,,U EQU;Y
VOLUME  DEPLOY$ NEW CODE TO XS TRAD+
S]V]S4 ,"O S]V] MISS$ ! UPDATE & / RAN
D1D CODE3 AN OLD 8,P[] ,PEG0 TE/+ R\T9E
T A REPURPOS$ FLAG _H SIL5TLY
REACTIVAT$1 : B"\ HI< & SOLD L[ Z FA/ Z
POSSIBLE4 ,= #DE M9UTES ! ALGORI?M
HEMORRHAG$  #D MILLION EXECU;NS ACR #AED
/OCKS  :ILE 5G9E]S1 LACK+ A KILL SWIT*1
HUNT$ ! CAUSE4 ,KNI<T LO/ @S#DDJ MILLION
AB @S#AJ MILLION P] M9UTE  & N"E
RECOV]$1 FOLD+ 9TO A M]G] )9 MON?S4 ,!
,,SEC'S LESSON3 X WASN'T A BUG 9 LOGIC2
X 0 A BUG 9 DEPLOY;T 4CIPL9E4
#C4 ,CR[D,/RIKE  ! WOR/ "D 9 ,,X HI/ORY
"<#BJBD">
,ON #AI ,JULY #BJBD1 A R\T9E 3T5T UPDATE
TO ,CR[D,/RIKE'S ,FALCON SECUR;Y S5SOR
%IPP$ A *ANNEL FILE ^: DATA TRI7]$ AN
\-(-B.DS MEMORY R1D 9 ! S5SOR DRIV]  &
9/ANTLY S5T R\<LY #H4E MILLION ,W9D[S
MA*9ES 9TO ! BLUE SCRE5 ( D1?1 _WWIDE1 9
"O /ROKE4 ,AIRL9ES GR.D$ ?\S&S ( FLI<TS4
,HOSPITALS PO/PON$ SURG]IES4 #IAA CALL
C5T]S W5T D>K4 ,X /&S Z ! L>GE/ ,,X
\TAGE "E RECORD$  AN E/IMAT$ @S#E4D
BILLION 9 DAMAGE TO ,=TUNE #EJJ
COMPANIES AL"O  & ! DEF9ITIVE PRO( T A
S+LE BYTES-WIDE DEFECT1 PU%$ GLOBALLY 9
M9UTES1 C FREEZE A CIVILIZA;N'S
9FRA/RUCTURE4
#B4 ,BOE+ #GCG ,,MAX ,,MCAS  :5 ! DESIGN
IS ! BUG "<#BJAH#AI">
.<FIGURE3 ,! GR.D$ ,,MAX FLEET  #CDF
LIVES & A #BJ-MON? _WWIDE GR.D+ "<PUBLIC
DOMA9 _/ ,,CC">.>
,! D1DLIE/ 5TRY IS AL ! MO/ 4PUT$ Z A
8BUG0  & ! H"O/ TR1T;T REQUIRES SAY+ S4
,! ,MANEUV]+ ,"*I/ICS ,AUG;TA;N ,SY/EM
"W$ Z DESIGN$3 X PU%$ ! NOSE D[N :5 !
ANGLE-(-ATTACK S5SOR REPORT$ A /ALL4 ,!
CATA/ROPHIC FLAW 0 >*ITECTURAL  ,,MCAS
DEP5D$ ON A S+LE ,,AOA S5SOR & CD FIRE
REP1T$LY4 ,LION ,AIR #FAJ & ,E?IOPIAN
#CJB  #CDF P  DI$ 9 TWO NE>-ID5TICAL
CRA%ES FIVE MON?S A"P2 ! FLEET GR.D$ =
#BJ MON?S & ,BOE+ PD OV] @S#BJ BILLION4
,! CODE DID :AT X 0 TOLD4 ,:AT FAIL$ 0 !
5G9E]+ 4CIPL9E >.D X  : IS PRECISELY :Y
X 2L;GS "H3 ! D1DLIE/ S(TW>E BUGS >E !
"OS ^: SPECIFICA;N 0 ! DEFECT4
#A4 ,!RAC-#BE  ! CODE T KILL$
"<#AIHE#HG">
,! WOR/ BUG "E WRITT5 IS ! "O T MADE
8S(TW>E SAFETY0 A PR(ES.N4 ,! ,!RAC-#BE
0 A RADIA;N-!RAPY MA*9E ^: PR$ECESSOR'S
H>DW>E 9T]LOCKS _H BE5 REPLAC$ BY S(TW>E
3TROL4 ,TWO DEFECTS COMB9$3 A RACE 3DI;N
A FA/-TYP+ OP]ATOR CD F9I% $ITS 2F !
MA*9E'S 3CURR5T TASKS RESYN*RONIZ$  & AN
9TEG]-OV]FL[ FLAG T Z]O$ \ XS [N SAFETY
*ECK E #BEF? PASS4 ,9 BO? FAILURE PA?S1
! MA*9E CD 5T] A /ATE DELIV]+
ELECTRON-B1M DOSES UP TO @9#AJJ 9T5D$ 
PATI5TS DESCRIB$ FEEL+ 8FIRE0 & LAT] DI$
OR SU6]$ HORRIFIC RADIA;N 9JURIES4 ,AT
L1/ SIX DOCU;T$ OV]DOSES1 S"EAL FATAL1
O3URR$ 2T #AIHE & #AIHG 2F ! ,,FDA =C$ A
FIX4 ,NANCY ,LEVESON'S 9VE/IGA;N 2CAME !
TEXTBOOK CASE  ! MO;T ! 9DU/RY LE>N$ T
8X COMPILES & USUALLY "WS0 IS N A SAFETY
>GU;T4
,! L$G]  ! HALL AT A GL.E
_?  ,BUG  ,YE>  ,! TOLL  ,! DEFECT 9 "O
L9E   #A  ,!RAC-#BE  #AIHE#HG  S"EAL
D1?S1 @9#F OV]DOSES  RACE 3DI;N "6
OV]FL[$ SAFETY FLAG   #B  #GCG ,,MAX
,,MCAS  #BJAH#AI  #CDF D1?S1 @S#BJ;,B"6 
S+LE-S5SOR DESIGN CD FIRE REP1T$LY   #C 
,CR[D,/RIKE  #BJBD  #H4E;,M MA*9ES2
@9@S#E4D;;,B  \-(-B.DS R1D 9 A %IPP$
UPDATE   #D  ,KNI<T ,CAPITAL  #BJAB 
@S#DDJ;,M 9 #DE M9  D1D CODE PA?
REACTIVAT$ BY REUS$ FLAG   #E  ,MORRIS
WORM  #AIHH  @9#AJ.0 ( ! 9T]NET  BU6]
OV]FL[ "6 NO RE-9FEC;N *ECK   #F  ,>IANE
#EJA  #AIIF  @S#CGJ;,M 9 #CG ;S  #FD-BIT
VALUE  #AF-BIT 9T OV]FL[   #G  ,P5TIUM
,,FDIV  #AIID  @S#DGE;,M RECALL  #E
MISS+ LOOKUP-TABLE 5TRIES   #H  ,M>S
,CLIMATE ,ORBIT]  #AIII  @S#CBG;,M
SPACECRAFT  P.D-SECONDS VS
NEWTON-SECONDS   #I  ,,AT@&,T CRA% 
#AIIJ  #I-H\R NA;NAL \TAGE  BR1K EXIT+ !
WR;G BLOCK   #AJ  ,M>S ,PA?F9D]  #AIIG 
RESETS ON ,M>S  PRIOR;Y 9V].N  PAT*$ F
,E>? ,4HONORABLE M5;NS
"9 ,PATRIOT MISSILE1 ,DHAHRAN "<#AIIA"> 
A #BD-BIT CLOCK APPROXIMA;N ( #J4A
SECONDS DRIFT$ @9#J4CD ;S AF #AJJ H\RS (
UP"T2 ! TRACK+ GATE MISS$ AN 9COM+ ,SCUD
BY @9#FJJ ;M4 #BH SOLDI]S DI$4 ,! FIX _H
%IPP$  X J _HN'T BE5 9/ALL$ YET4 "9
,Y#B;,K "<#BJJJ">  TWO-DIGIT YE>S ?R1T5$
CIVILIZA;N'S DATE >I?METIC2 ! _W SP5T AN
E/IMAT$ @S#AJJ BILLION ON REM$IA;N & !
ROLLOV] PASS$ ALM QUIETLY4 ,! MO/
EXP5SIVE BUG  PRECISELY 2C X 0 FIX$4 "9
,TOYOTA UN9T5D$ A3EL]A;N "<#BJJI#AJ"> 
9VE/IGA;NS F.D POSSIBLE /ACK OV]FL[ &
MEMORY CORRUP;N 9 ! 5G9E ,,ECU2 DOZ5S (
D1?S 7 ATTRIBUT$ TO UN9T5D$ A3EL]A;N &
,TOYOTA PD A @S#A4B BILLION SETTLE;T4
,CAUSA;N REMA9S 4PUT$  LI/$ H"O/LY4 "9
,HE>TBLE$ "<#BJAD">  A MISS+ B.DS *ECK 9
,OP5,S,S,L'S HE>TB1T LET ANY"O R1D S]V]
MEMORY2 @9#AG.0 ( ! WEB'S ,,TLS S]V]S
L1K$ PRIVATE KEYS = TWO YE>S4 ,! BUG T
PROV$ 9T]NET 9FRA/RUCTURE RAN ON
VOLUNTE]S' SP>E "T4
,:AT ! HALL T1*ES
,E 9DUCTEE FAIL$ DI6]5TLY  AN OV]FL[1 A
UNIT1 A SCOPE1 A RACE1 A FLAG1 A S5SOR4
,B ! PATT]N "UN1? IS "O S5T;E3 ! CODE
DID EXACTLY :AT X 0 WRITT5 TO D1 & :AT X
0 WRITT5 TO D 0 WR;G 9 A WAY NOBODY
*ECK$4 ,! HALL'S R1L LESSON ISN'T T
PROGRAMM]S ]R  X'S T ^! T5 4A/]S 7 ALL
PREV5TABLE BY ! BOR+ ?+S3 9T]FACE
SPECIFICA;NS1 KILL SWIT*ES1 H>DW>E
9T]LOCKS1 & ASK+ :AT ! S(TW>E DOES :5 !
9PUTS >E IMPOSSIBLE4
,FREQU5TLY ASK$
"9 ,:AT 0 ! F/ S(TW>E BUG8 ,! ,H>V>D
,M>K ,,II MO? ( #I ,SEPTEMB] #AIDG  ?\<
8BUG0 = A DEFECT PR$ATES COMPUT+ BY
@9#GJ YE>S4 "9 ,:AT IS ! D1DLIE/ S(TW>E
BUG8 ,BY DIRECT S(TW>E FAULT1 ,!RAC-#BE2
BY S(TW>E-9VOLV$ DESIGN1 ! #GCG ,,MAX'S
,,MCAS  #CDF D1?S4  ,:AT IS ! MO/
EXP5SIVE S(TW>E BUG8 ,Y#B;,K REM$IA;N
"<@9@S#AJJ;;,B1 SP5T PREV5T+"9
FAILURE">2 = A S+LE LIVE 9CID5T1
,CR[D,/RIKE'S @9@S#E4D;;,B "D4 "9 ,:AT
IS ! FA/E/ A BUG HAS DE/ROY$ M"OY8
,KNI<T ,CAPITAL  @9@S#AJ MILLION P]
M9UTE = #DE M9UTES4
,SEE AL
"9 HI/ORY ( PROGRAMM+ "9 COMPIL]S "9 D1D
PROGRAMM+ LANGUAGES "9 SCI5TIFIC NOTA;N