Software Glitch Leads To $23,148,855,308,184,500 Visa Charges 544
Hmmm2000 writes "Recently several Visa card holders were, um, overcharged for certain purchases, to the tune of $23,148,855,308,184,500.00 on a single charge. The company says it was due to a programming error, and that the problem has been corrected. What is interesting is that the amount charged actually reveals the type of programming error that caused the problem. 23,148,855,308,184,500.00 * 100 (I'm guessing this is how the number is actually stored) is 2314885530818450000. Convert 2314885530818450000 to hexadecimal, and you end up with 20 20 20 20 20 20 12 50. Most C/C++ programmers see the error now ... hex 20 is a space. So spaces were stuffed into a field where binary zero should have been."
Hey (Score:5, Funny)
Re:Hey (Score:4, Funny)
Re:Hey (Score:4, Funny)
Re:Hey (Score:5, Funny)
Welcome, visitor from the past! In this futuristic year of 2009, people who are not nerds are actually USING COMPUTERS! Also, WOMEN are allowed to VOTE and WEAR PANTS.
Oh sure, but let them vote to wear no pants and the wheels come right off the whole system... Pity... I for one would have welcomed our bottomless female overlords...
Re: (Score:3, Funny)
Ah, but let them vote with no pants and watch the system achieve unheard of performance!
meh (Score:5, Funny)
Re:meh (Score:5, Funny)
Re:meh (Score:5, Interesting)
Re:meh (Score:5, Insightful)
Yeah, of course what happened after that was people started having to resort to bartering for goods using small amounts of Gold, Kinda like what they did TWO-Thousand years ago. So you take an economy and you screw it up so badly that you have to reset it back to the pre-roman levels of commerce.
.
And people laugh at other people for collecting and buying gold.
Re:meh (Score:5, Insightful)
The thing is if the economy tanks that badly, gold probably won't be worth much either. Which is why buying large boxes of ammo, cigarettes, and toilet paper is the way to go!
Re:meh (Score:5, Funny)
Re:meh (Score:5, Funny)
Re:meh (Score:4, Insightful)
No, you're wrong.
Gold will just get ridiculously expensive - think $2000/oz or as much as $10000/oz - double its current price.
Just give it 5-10 years, you'll see.
Re:meh (Score:4, Insightful)
Gold is only worth that much (in relation to other things) because of it's relative scarcity *and* because of the demand due to perceived value.
If there is no perceived value for gold (think: a post-apocalyptic world where people are just fighting to stay alive, not save up for later), cigarettes or clean food and water may be worth more.
Re: (Score:3, Insightful)
a post-apocalyptic world where people are just fighting to stay alive... cigarettes or clean food and water may be worth more.
If you're just fighting to stay alive... I'm thinking cigarettes aren't at the top of your shopping list.
Re: (Score:3, Insightful)
If there is no perceived value for gold (think: a post-apocalyptic world where people are just fighting to stay alive, not save up for later), cigarettes or clean food and water may be worth more.
Cigarettes and clean food and water are too easily consumed to make a good exchange technology (in any case, food and clean water are the commodities one would most likely want to exchange). Assuming central authority breaks down in this post-apocalyptic society there will be a radical need for a universally rec
Re:meh (Score:5, Funny)
Exactly. Then we'll use bottle caps for currency.
Re:meh (Score:5, Insightful)
People don't use gold for it's intrinsic value as a metal. It's used because sometimes you can't buy a herd of goats with a thousand cans of Dinty Moore stew. Gold is small, convenient, historical, and rare, so it makes a pretty good medium of exchange.
Historically paper money only had value because it was backed by gold, or some other known commodity. Now it's backed by faith. How's that working out for everybody?
Re:meh (Score:5, Insightful)
Now it's backed by faith. How's that working out for everybody?
Gold also only has value because people believe it does - as the GP post said, you can't eat it, you can't really build a shelter out of it, etc.
In any event, why should the money supply be tied to a rare, precious metal? Matching the growth (or shrinkage!) of the money supply based solely on the discovery, loss, or recovery of a particular natural resource hardly seems like a good plan for managing the economy.
Re:meh (Score:5, Insightful)
Gold is small, convenient, historical, and rare, so it makes a pretty good medium of exchange.
This is what people don't get. When you are transferring large amounts of wealth around there are very few other options. I've heard of using oil as a medium... but transferring the equivalent amount of wealth in oil would require fleets of tankers. There is nothing special about gold except that it is common enough to be common but rare enough to be rare. We could use platinum but that is too rare, or copper, which isn't quite rare enough. Silver is actually a decent alternative and what many economies used prior to settling on gold.
No, when you're starving, gold isn't worth much. But when you're just past the starving point and trying to create a base economy, crating around a wheelbarrow full of canned goods is inconvenient and makes you a target.
Re: (Score:3, Insightful)
The difference is that the supply of gold fluctuates unpredictably based on natural deposits, industrial use, and the activity of mining companies, while the supply of dollars fluctuates deliberately according to the monetary policy imposed by the central bank. Generally we're better off when the supply is controlled by people who know what they're doing rather than random fluctuations -- if you think business cycles are bad now, take a look at how they worked before the Federal Reserve -- although the outcome can be catastrophic when it's controlled by people who have no clue (i.e. Zimbabwe).
So you're saying the people who didn't see the current crisis coming, assured us it was contained, and then told us we barely avoided catastrophe know what they're doing and are the perfect stewards for our monetary system?
Ben Bernanke: There is no housing bubble to go bust. [washingtonpost.com]
Ben Bernanke: Subprime Mortgage Problems Contained [newsmax.com]
Ben Bernanke: We barely avoided catastrophe [bankaholic.com]
The Federal Reserve was founded in 1913. The Great Depression started 16 years later.
The intrinsic value of gold is that it is r
Re:meh (Score:4, Insightful)
Historically paper money only had value because it was backed by gold, or some other known commodity. Now it's backed by faith. How's that working out for everybody?
So far, much better than the last global financial meltdown that happened when (and because) we were still on the gold standard.
Re:meh (Score:4, Informative)
So you're saying the people who didn't see the current crisis coming, assured us it was contained, and then told us we barely avoided catastrophe know what they're doing and are the perfect stewards for our monetary system?
Not perfect stewards, no. But they're still better stewards than mining companies and gold-consuming industries. The alternative is for the value of our currency be affected by what sort of rocks were uncovered recently or how many edge connectors and necklaces are being manufactured; do you really think that would be an improvement?
The Federal Reserve was founded in 1913. The Great Depression started 16 years later.
Surely you aren't trying to imply causality there, are you? Because recessions have gotten shorter and less frequent [seekingalpha.com] since 1900.
The intrinsic value of gold is that it is rare enough to hold large quantities of wealth and cannot be manufactured arbitrarily. The second reason is why every fiat currency has historically failed
Except the ones that haven't, you mean?
Re:meh (Score:5, Funny)
If inflation gets that bad, your currency *is* your toilet paper.
Re:meh (Score:5, Interesting)
Meanwhile, you're transferring the gold certificates around, complete with fees for every transaction (straight to the vault owner, naturally) and he still has an impervious vault full of gold. If society breaks down--which gold buyers seem to expect--you really think he'll honor those scraps of paper? No, he'll be riding it out inside the vault.
I'm too paranoid to buy gold, I invested in seed corn. Too large to steal, too real to lose value.
Re: (Score:3, Funny)
If we really do suffer a complete and total failure of society to the point where the caretakers of the large stockpiles of gold can get away with claiming ownership of it then the gold will be worthless anyways and of no value anyways. Gold buying is there to help insure against recessions or the collapse of one or more economies/currencies.
BTW If society does collapse I'm coming to live with you and your pile of corn :)
Re: (Score:3, Informative)
On January 16, 2009, Zimbabwe announced plans for imminent issue of banknotes of $10 trillion, $20 trillion, $50 trillion, and $100 trillion
Believe it or not, that was after Zimbabwe had lopped off a bunch of zeros from their currency the previous year.... twice. And then they did it a third time [cnn.com] a month after they printed their first $100 trillion notes.
Re:meh (Score:4, Interesting)
Believe it or not, that was after Zimbabwe had lopped off a bunch of zeros from their currency the previous year.... twice. And then they did it a third time a month after they printed their first $100 trillion notes.
I was going to say something similar:-
On July 30, 2008, the Governor of the RBZ, Gideon Gono announced that the Zimbabwe dollar would be redenominated by removing 10 zeroes, with effect from August 1, 2008. ZWD10billion will become 1 dollar after the redenomination.
Then
[*After* the above revaluing] On 12 January 2009, Zimbabwe introduced the $50,000,000,000 note.
So you can multiply $50 billion by $10 billion (per new dollar) to get what it would have been if they hadn't done that sleight of hand; $500 billion billion.
Or let's put that another way (50 * 10^9) * (10 * 10^9) = 500 * 10^18 =
500 exadollars, or 5,000,000,000,000,000,000 dollars.
If 1,000,000 US dollars in 100 dollar bills weighs 10kg [answers.com], then assuming Zimbabwean 100 dollars had similar weight, the unrevalued currency would weigh:-
$5*(10^18) / ($100,000 per kilogram) = 5*(10^13) kilograms = 5*(10^10) metric tonnes....
i.e. 50 billion tonnes!!!
Re:meh (Score:5, Insightful)
*My* question, though, is this:
Why do Visa's systems have the bandwitdh to *allow* 23 quadrillion dollars to make it to a credit card bill.
Is there anyone, at all, anywhere, who's gonna carry a balance of even a megabuck?
6.2, really. That's all they needed.
Re: (Score:3, Insightful)
*My* question, though, is this:
Why do Visa's systems have the bandwitdh to *allow* 23 quadrillion dollars to make it to a credit card bill.
Is there anyone, at all, anywhere, who's gonna carry a balance of even a megabuck?
6.2, really. That's all they needed.
Full ack, 6.2 digits will be enough for all purposes eternally.
Just like no computer will ever need more than 64k RAM, and 32 bits will always be enough for time_t.
Re: (Score:3, Funny)
Re: (Score:3, Insightful)
FRACK! At the very LEAST your programmers should have been told (or, if they asked, been allowed) to put QA bounding-box fields on the statements. If a monthly charge font size to be printed is longer than the width of the statement imaginary box, eject the statement from the enveloping system, then punt it to a manager.
That isn't even close to how the financial organizations function. There is simply zero drive to pre-empt problems as there is no major authority breathing down their necks and auditing every single iteration of their customer-facing software processes in great detail.
Moreover, the customers are individuals or small businesses, meaning there is practically nothing to fear in the form of loss of business due to dissatisfied customerbase or defamation. It's not like they have too many other choices.
At least it wasn't EBCDIC (Score:4, Funny)
Re: (Score:3, Funny)
Yeah, well -- if they were still using COBOL this wouldn't have happened.
Now get off my lawns!
Re: (Score:2)
Good god, if Visa is still using a Unisys V Series and Burroughs terminals.... I'm switching to Mastercard!
Re:At least it wasn't EBCDIC (Score:5, Funny)
Excellent. Now please wait while we calculate your interest with an abacus.
Re:At least it wasn't EBCDIC (Score:5, Funny)
That would be a really large abacus run by a team of shackled slaves being whipped by a leather clad master.
So pretty much like any IT shop.
Re: (Score:3, Funny)
of course they didn't reverse interest charges... (Score:2)
Re: (Score:3, Interesting)
Seriously though the Visa transaction charge of 2% = 462,977,106,163,690
How could this transaction go through?
Re:of course they didn't reverse interest charges. (Score:4, Funny)
Extremely speculative. (Score:2, Insightful)
Re: (Score:3, Informative)
Re: (Score:3, Interesting)
Re:Extremely speculative. (Score:4, Insightful)
Re: (Score:3, Insightful)
Yeah, to make the jump from hexidecimal representation for a number to ascii is rather a long-shot.
Here's another:
Represented as 2-nibble-per-byte packed BCD (Binary Coded Decimal), this is the exact correct number of digits for a Visa card number. What you could well be looking at is a pre-initialized dummy card number overlayed with a price (stored in the last two bytes). If so, the expected value of the original default would be:
20 20 20 20 20 20 20 24
That is, a card number that stores 2 in every odd po
Re:Extremely speculative. (Score:5, Interesting)
I'm afraid you're wrong, sir (Score:5, Informative)
I'm afraid you're wrong, sir or madam.
I am one of the victims of this programming error, and I can tell you that several thousand VISA debit transactions were miscoded with the same amount: $23,148,855,308,184,500.00.
I was not smart enough to look at my card number before I sent it off to Consumerist [consumerist.com] so that VISA could be made fun of. Happily, the string does not contain my (or apparently anybody's) credit (or debit) card number.
Minimum (Score:5, Funny)
Re:Minimum (Score:5, Funny)
$5. But if they've got any sense they'll pay the whole thing off straight away to avoid the interest.
Not an error (Score:5, Funny)
This is how Obama is paying for health care.
Re: (Score:2)
This is how Obama is paying for health care.
By adding a 0.003% tax on all visa transactions?
So what's the big deal? (Score:5, Funny)
Isn't that about the cost of a couple of packs of smokes and a bag of chips at one of those gas station stores? If he filled up the truck, too...well, that would just about account for it.
Dude should shut up and pay what he owes.
Re:So what's the big deal? (Score:4, Insightful)
That, or the president thinks the best way to prevent him from ever smoking again is to never be able to afford one.
Re:So what's the big deal? (Score:5, Funny)
The "sin" tax on those smokes must have been part of the new anti-smoking bill.
Wait... does that mean this is a sin tax error?
Re: (Score:3, Funny)
Sir, I tip my hat to you. That was very possibly the best, and almost certainly the worst, joke in this thread. (I'd mod you up, as I have points, but you're at +5 already).
Not pr0n then? (Score:2)
So they weren't getting multiply charged by a site that claimed to only charge once, and only if you cancelled after the trial period, even though you can cancelled before the end of the trial period. Just spaces huh, who would have though?
Yes I am ashamed I signed up innocently, now realising torrents are far safer.
Sensationalist article (Score:5, Funny)
He also felt a stab of fear that he had saddled all his unborn grandchildren -- and their grandchildren -- with a lifetime of debt. "Down the generational line, nobody would have any money."
Give me a break.
Re: (Score:3, Insightful)
anyone who sees a 23 quadrillion dollar charge on their visa bill and thinks that should not be allowed to have children.
Stupidity is evil!
What is truly appalling... (Score:5, Insightful)
...is that this was not caught by validity checks. Was this perhaps an error that affected only the printing of the statement?
Re:What is truly appalling... (Score:5, Informative)
No, it wasn't just the output. People were charged overlimit fees in addition to the erroneous amount.
Re: (Score:3, Insightful)
My thoughts exactly. Why is it that when I try and legitimately spend a largish amount (anything into 4 figures basically), the credit card company immediately phones me to check on it, and if I try to spend above my credit limit, they can block the purchase, but things like this are not caught?
Something similar happened to my brother once - a $10 fee for a replacement card somehow became $12 million, automatically debited from his bank account. It took 3 day
Illuminating answer on Stack Overflow (Score:2, Interesting)
It was probably partly overwritten by spaces [stackoverflow.com]
The Sad Thing... (Score:5, Insightful)
"The bank kept him on hold for two hours, during which time he contemplated the impossibly bleak financial future that might await him. He also felt a stab of fear that he had saddled all his unborn grandchildren -- and their grandchildren -- with a lifetime of debt. "Down the generational line, nobody would have any money."
For fuck's sake, people, the credit card guys haven't actually bought a law concerning hereditary debt slavery yet, and this guy thinks that it is already on the books?
Muszynski compared the giant debt reprieve to receiving "an amazing Monopoly card that says, 'Bank error in your favor.' "
Pathetic. This guy is grateful that Visa condescended to fix their obvious mistake(this isn't some he said/she said billing dispute, this is someone who allegedly spent more than the world GDP at a gas station)? What is this cringing bullshit? Either this guy is just a sad sack or, rather worse, the "customer service" we get, along with the kangaroo courts that are "mandatory binding arbitration" actually make thankfulness for not being screwed a reasonable response.
Re:The Sad Thing... (Score:5, Funny)
Anything more then "Huh, what an odd error" and you really need to check your reality.
On the plus side you might be able to leverage:
Hey, if Visa lends me 23 quintillion dollar, surely I'm good for another 100 billion.
Re:The Sad Thing... (Score:5, Insightful)
Have you contemplated the possibility that maybe, just maybe, this guy was just cracking wise to the reporter?
"Can I buy Europe on pump 4?" That doesn't really sound like a guy who was taking the bill seriously.
Re: (Score:3, Informative)
Actually, I think it is more like 95% of the time [consumerist.com] So it's not so bad after all.
Yeeeaaaaahh... (Score:2)
Re: (Score:2)
Re:Yeeeaaaaahh... (Score:5, Funny)
I had a roommate who had a calling card that had rolled over to maxint minutes remaining. He checked the balance on a speakerphone to prove it to me.
I can hear the radio ads now (Score:5, Funny)
Re:I can hear the radio ads now (Score:5, Funny)
Actually calling up one of these companies and having them pull up your balance would be awesome.
Been there (Score:5, Funny)
Zimbabwe (Score:2)
Maybe they ran it through the Zimbabwe exchange conversion by mistake.
It's a Trap! (Score:2)
Re:It's a Trap! (Score:5, Funny)
Will the IRS tax any party for this in any way tip (Score:2)
Will the IRS tax any party for this in any way tipped workers look out you may end up owning 15% of $23,148,855,308,184,500.00 of the bill even if this is a error yes the IRS is evil like that some times like that.
Will people get back billed / end up on a baned list as visa seems to be whipping out the full charge is the real charge lost now?
Will people get all there overdrafts taken off or just one even if they are not at error for all of them.
Debt--American Dream (Score:3, Funny)
It's the American Dream!
reassuring... (Score:5, Funny)
It's good to know their system is able to handle $23 quadrillion charges, now I just need to get them to raise my limit a bit.
Only Notice Large Glitches (Score:5, Insightful)
Re:Only Notice Large Glitches (Score:5, Interesting)
Re: (Score:3, Interesting)
It sucks because the phone companies legally make money off of other people's fraud this way, so they have negative incentive to check the identity of the crammers.
Re: (Score:3, Funny)
Charge several thousand people $2.31 too much and you can make an alright profit.
Let's see... 2000 x $2.31 is, er, around $4620. Yes indeed, big mamou, yes indeed.
Nothing to see here, keep moving along please... (Score:5, Informative)
I work in this industry. The only novelty here is that the error got into production, and was not caught and corrected before it went that far.
Submitters send files to processors which are supposed to be formatted according to specifications.
Note I wrote 'supposed to be'.
Some submitters do, from time to time, change their code, and sometimes they get it wrong. For instance padding a field with spaces instead of zeros. Woopsie...!
Seems that's what happened here. Sounds like a hex or dec field got padded with hex 20, and boom.
This is annoying, especially when the processor gets to help correct the overwhelming number of errors, and then tries to explain that it wasn't their fault. Plenty of blame to go around with this one.
And then explains why they don't both validate/sanitize input, and test for at least some reasonable maximum value in the transaction amount. A max amount of $10,000,000 would have fixed this. That and an obvious lapse in testing. This is what keeps my bosses awake sometimes, fearing they will end up on the front page of the fishwrap looking stupid 'cause their overworked minions screwed something up, or didn't check, or didn't test very well. I love one of the guys we have testing. He's insufferable, and he catches genuine show-stoppers on a regular basis. They can't pay him what he's been worth, literally $millions, just in avoiding downtime and re-working code that went too far down the wrong path.
Believe me, this is in some ways preferable to getting files with one byte wrong that doesn't show up for a month, or sending the wrong data format (hex instead of packed binary or EBCDIC, for instance) and crashing the process completely. Please, I know data should never IPL a system. Tell it to the architects, please. As if they don't know now, after the one crash...
If you knew what I know, you'd chuckle and share this story with some of your buddies in development and certification.
And pray a little.
At least it didn't overbill the cardholders by $.08/transaction. That would suck. This is easy by comparison. Just fix the report data. Piece of cake. Evening's worth of coding and slam it out in off-peak time. Hahahahaha!
Re: (Score:3, Informative)
Oh, and it wasn't as simple as padding with spaces. Space is hex 20. Zero is hex 30. They should have been been billed 30 quadrillion-something. More likely it was a bad conversion. Still reason to waterboard the testers.
You should try converting packed binary to some flavor of EBCDIC, not knowing in advance which particular version EBCDIC they meant.
Re:Nothing to see here, keep moving along please.. (Score:3, Interesting)
I work in this industry. The only novelty here is that the error got into production, and was not caught and corrected before it went that far.
That explains why there are so many software testers currently looking for work. The CC industry doesn't use as many of them, anymore.
Some submitters do, from time to time, change their code, and sometimes they get it wrong. For instance padding a field with spaces instead of zeros. Woopsie...!
You're still using legacy zero padding? You should be doing things in XML.
Seems that's what happened here. Sounds like a hex or dec field got padded with hex 20, and boom.
Not quite. If it were padded with space characters, you get 0x20 in each byte (and that's just what this number had in the first 6 of 8 bytes). If it were padded with zero characters, you would get 34,723,282,962,276,803.04 or so.
The REAL problem here is that the code was interpreting 64 bits as int
Re: (Score:3, Insightful)
Padding is used in fixed-length fields.
There. Was that so hard?
Oh yeah, it is. Let me finish this.
'Our' submission files use combinations of fixed-length and variable-length fields. Fixed-length is easy, but variable-length is usually designated by a check byte that tells you what sort of data follows. Our submission file can overall be submitted as either fixed-length or variable length. Yes, the terms are mixed in the specification.
Why?
Well, among other things, many submission files include data inte
My question... (Score:5, Funny)
Does he still get the airline miles for that one? I mean, even at 1 mile per dollar spent.... He can now book a first class ticket to mars...
Visa Rewards? (Score:5, Funny)
Sounds like Red Dwarf (Score:5, Funny)
Holly: Busy, Dave?
Lister: Well, yeah. I am, actually.
Holly: Oh, then you won't want to know about the two super-lightspeed
fighters that are tracking us.
Lister: What?!
Holly: I'll leave you to your bubble blowing, mate.
Lister: No, Hol, come on, come on.
Holly: They're from Earth.
Lister: Three million years away?
Holly: They're from the NorWEB federation.
Lister: What's that?
Holly: The North Western Electricity Board. They want you, Dave.
Lister: Me? Why? What for?
Holly: For your crimes against humanity.
Lister: You what!
Holly: It seems when you left Earth three million years ago, you
left two half-eaten German sausages on a plate in your
kitchen.
Lister: Did I?
Holly: You know what happens to sausages left unattended for
three million years?
Lister: Yeah. They go all mouldy.
Holly: Your sausages, Dave, now cover seven-eighths of the Earth's
surface. Also you left seventeen pounds, fifty pence in a
bank account. Thanks to compound interest you now own
ninety-eight percent of all the world's wealth, but since
you've hoarded it for three million years nobody's got any
money except for you and NorWEB.
Lister: Why NorWEB?
Holly: You left a light on in the bathroom. I've got a final demand
here for one hundred and eighty billion pounds.
Lister: A hundred and eighty billion pounds! You're kidding!
Holly: (wearing Groucho Marx disguise) April fool.
Lister: But it's not April.
Holly: Yeah, I know, but I could hardly wait six months with a red-hot
jape like that under my belt.
Re:Sounds like Red Dwarf (Score:4, Funny)
64 bit charge amounts? (Score:4, Insightful)
Re: (Score:3, Funny)
Re:64 bit charge amounts? (Score:4, Insightful)
Isn't that his iPhone bill.. (Score:3, Funny)
Shouldn't have checked his email from Mexico.
The United States is right behind him.. (Score:3, Interesting)
Since our national debit has just hit 1 trillion dollars, we in the United States of American will be second to him in debit.
I'm very surprised that credit card company, bank or anybody else didn't have any alarm bells (more air raid sirens in this case) when this went through. Also I thought there will be limit on anyone could charge, not only the credit card, bank or even this case, the nation could get.
This shows there is something wrong with the financial system and that is the understatement of the century.
Almost $100k in interest per millisecond. (Score:4, Funny)
Re: (Score:3, Funny)
0x20 is "space" in ASCII. The ASCII table maps numerical values to (mostly) readable characters. Unicode is a buffed out table supporting international (and other) characters. The programmers forgot to strip the whitespace from their input.
Re:stack garbage (Score:5, Funny)
Oh please... if the person on the phone knew anything about programming, they wouldn't be working the phones, they would be coding their apps like the guys who got promoted from answering the phones last week.
Re: (Score:3, Funny)