Hacker News new | past | comments | ask | show | jobs | submit login

Have we actually seen the real interface? There was the first round, which was a mockup many were told was a 'screenshot', and a follow up that was a second mock up that was closer.

http://www.civilbeat.org/2018/01/hawaii-distributed-phony-im...

It's a common enough UI issue to be immediately clear to a professional how it happened though.




"HEMA can’t publicize the actual screen because of security concerns — the system could then then be vulnerable to hackers, Rapoza said."

The level of incompetence is astounding!


It's unreal.

> “We asked (Hawaii Emergency Management Agency) for a screenshot and that’s what they gave us,” Ige [Hawaii Governor] spokeswoman Jodi Leong told Civil Beat on Tuesday. “At no time did anybody tell me it wasn’t a screenshot.”

So the governor asked for a screenshot and they sent him a "mockup" instead of the actual interface?

I can only assume the actual interface was somehow even worse than the fake.


Given all of the incompetency here, including the awful UI, and the password on a sticky note that got leaked, I wouldn't be surprised if the links themselves leaked info like: "Send missile alert (confirmation password is hawaii1)".


Not claiming they are competent. However it may be the case that the real screenshot would be exactly as shown, but also includes few extra lines of "buttons" that have captions not meant for public audience. This ban may be coming from federal level. Or reveal they are using IE5 or something. Just a far-fetched theory.

However, I'd still stand with Peter here [1] and think they just could not get the "screenshot tool" installed to the machine.

[1] https://en.m.wikipedia.org/wiki/Peter_principle


Everyone is talking about interfaces and clicks. Yeah, we know he clicked the wrong item. I'd be interested to know if there was a paper manual sitting on his desk with procedure instructions for this type of situation and whether or not his mistake was either not following the procedure or following it incorrectly. For all we know, there could be a control to avoid a false alert, even given a shitty interface, that should have been followed.


Wow, that link just loads a solid white page if you have JS disabled. It even scrolls, presumably, across the actual length of the content.

Amazing.




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: