• Beej Jorgensen@lemmy.sdf.org
    link
    fedilink
    English
    arrow-up
    56
    ·
    52 minutes ago

    No mails arrived due to the disruption […]. So no one noticed that the maintenance safety system of the sauna landscape has long since sounded the alarm by mail. Because the automatic dosing system had pumped too much chlorine into the pool.

    Kinda scary to rely solely on email for such alarms.

    • Remember_the_tooth@lemmy.world
      link
      fedilink
      English
      arrow-up
      28
      ·
      36 minutes ago

      Yeah, I hate Microsoft as much as the next person, but this is 100% on Phantasialand for trying to cut corners with excessive automation.

      • tal@lemmy.today
        link
        fedilink
        English
        arrow-up
        11
        ·
        edit-2
        21 minutes ago

        I think that automation is fine, but when you start talking about life-critical systems, the bar on failure modes and reliability becomes a lot higher. Like, if you have a sensor for excessive chlorine levels, the default probably should be not to keep pumping more of the chemical in, but to have some “hard” upper level where no more chlorine goes in (and if the two systems aren’t directly-integrated, to at least let the maintenance safety system power off the chlorine system), and for a secondary alarm to be triggered (like, start playing a loud audible alarm) if maintenance doesn’t respond to the email notification and indicate that they’ve dismissed the alert within a given amount of time. That’s disruptive and undesirable compared to just emailing maintenance, but as long as there aren’t any failures, you shouldn’t ever see it. But if you do have it come up, you don’t want the failure mode to be chemical-keep-being-dumped-into-the-system-and-people-being-unaware-of-it.

        You want fail-safe behavior.

        Automation can increase safety by decreasing time until an issue is addressed, for example. Automation isn’t intrinsically incompatible with safety. Aircraft computers today use TCAS to automatically instruct pilots what to do if they are about to collide (and in fact, today the automated system is explicitly given higher priority than human air traffic controllers — if the two give pilots conflicting directives, the human is the one to be disregarded). But you gotta make your automated procedures have high reliability and handle failure the way you want when the consequences of a failure are high (and that goes for non-automated procedures too).

      • assaultpotato@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        1
        ·
        3 minutes ago

        Excessive automation? That actually seems like a great thing to have automated… just not by email. Nothing stopping them from having a sub ghz radio that sets off a physical alarm somewhere. Improper automation I think would be more apt. A purely local automated alarm sounds great, but the internet shouldn’t be involved imo, at least not on the critical path to remediation.

    • Reannlegge@lemmy.ca
      link
      fedilink
      English
      arrow-up
      5
      ·
      36 minutes ago

      I for one think that IT team should be kicked to the curb, but they will probably get raises to figure out that they can use email, healthchecks.io, and ntfy all at the same time for redundancy or they will say we need money to switch providers and set up a gmail account to do the same thing and call that redundant cause you know getting two emails saying the same thing is not going to end up just being ignored.

  • magnue@lemmy.world
    link
    fedilink
    English
    arrow-up
    25
    ·
    40 minutes ago

    Can’t put any blame on MS here. Using email for safety warnings with no redundancy is negligent.