[TNO-logo]
Museum logo

Other stories and anecdotes; 1978 - 1983

Computer security and IWIS-TNO

Panic broke lose at IWIS-TNO one day. The Cobol written computer running for paying the TNO-salaries broke down each time. The complete disk content was wiped each time. The problem appeared to be somewhere between the operating system and the Cobol-program. But where to search for? Could the Physics Laboratory people help? It was their salary as well...

The suspected Cobol-module seems to work flawlessly on our test system. At IWIS the system went down. New disk I/O-drivers (PP-program) were compiled and added to the system. No improvement. Where were these differences between their and our NOS/BE testsystem? Did we omit some system changes? Ultimately, we figured that our security protecting the PP was reading more bytes and overflowed its parameter list, an error that is still often exploited by hackers. At IWIS, this happened unexpectedly as their Cobol program went outside his table boundaries. As soon as our code was added to their system, they could start in determining the root cause for all the problems.

The CYBER had privacy problems

Certain training at the Hogere Krijgsschool (HKS; Higher Military School) required exposure to decision-taking models and computers. A number of terminal lines on the CYBER 74 were reserved for that purpose. One of the teachers at the HKS became very enthousiastic on that training tool, though he had an article placed into the Defence News including a photo of himself teaching. The Computer group was contacted by someone who regarded the pixel-sharp printing of usernames/passwords which were written on a blackboard and judged it as a security violation. We agreed and took immediate action. The teacher probably had not touched a computer since then...

Another external Armed Forces user had read something about privacy regulations those were being discussed in public, something that later became the Wet Persoonsregistraties (WPR). We were unpleasantly surprised when the Staatscourant published a note stating that the computer at our Laboratory contained the complete personnel database of one of our Services.
The Laboratorium was obviously the "holder" of the database according to the new draft law. As during that period many activists were very active in attacking defense sites, we did not like this type of public exposure....

Structured programming

In the middle and at the end of the seventies, it was the wave of "structured programming". Many deep discussions took place. What did comprise structured programming? Could a program be programmed in a structured way in Basic or in Fortran? Did it not require a language like Pascal? Or had one to believe Prof. Edgar Dijkstra and to proof each statement?

The members of the Computer group took part in those discussions as well. Systems programming was very pragmatic. The programming group took part in a working committee of the NGI. Those (wo)men were more purists looking at Dijkstra. Others had read "something" in the computer journals.

System programming was largely surprised on day when they retrieved the punch cards for a system interface from the vault. The system interface drove the Calcomp-plotter. It turned out that all cards with comments and description of the interface (self-documentary) were removed from the card deck. As structured programming "quality requirements" required that a subroutine was not larger than a single printed page, one of the colleagues had removed all comment cards from the deck. Now it fitted on one single page...

Another colleague, had heard a bell ringing somewhere far away! He tried the opposite. How to get as many Fortran statements on one single punch card?
Explanation of what could be a misunderstanding of the principles of structured programming took a lot meetings with them...

To support structured programming in Fortran, the software package FTS (ForTran Structured) was bought and installed at the end of 1979. FTS was a "pre-processor" which recognised constructions like IF- ELSE - ENDIF, DO..ENDDO and CASE-structures. After parsing, Fortran'66 code was delivered. When Fortran'77 became available, a FTS5 was developed in order to generate proper and more efficient Fortran'77 code.



Museum logo