Follow-up on EVE's Boot.ini Issue 169
Krinsath writes "CCP, publishers of Eve Online, have posted a Dev Blog detailing the circumstances leading up to the deletion of XP's boot.ini file, which was earlier discussed on Slashdot. The blog post has intimate details about how the mistake occurred (a new installer from their normal one), how they responded and what CCP has learned from it. While fairly dry, it is to the company's credit that they're being open about one of the more serious bugs to crop up in gaming's recent history."
That's actually a really straightforward response. (Score:5, Insightful)
Re:That's actually a really straightforward respon (Score:5, Funny)
Straightforward, sure.. but... | also, the bug (Score:5, Informative)
As for the bug itself... the installer code is NSIS script; quite powerful, but you do need to know what you're doing. Especially with a command such as "Delete", I can't help but wonder who failed to RTFM (TFM reads, as they point out, that "Delete" requires a full path to be safe or else it expects the path to be root) and instead made an -assumption- on how it would work.
Now, to their defense, NSIS is also a little inconsistent (RMDir needs
Although I think it's nice of them to say that they're not blaming Windows for their own mistake, I do honestly think that Windows should protect such vital files at all cost - including against Administrator level process (e.g. a prompt "you dumbass - are you sure?" will do).
Re:Straightforward, sure.. but... | also, the bug (Score:5, Informative)
Almost never will damages be covered. Come to think of it, I think in this case I can say "Damages will never be covered." You have to show value and proof of destruction of that value. Your homework being destroyed? Your dissertation being destroyed? While it may have a large amount of value to you, monetarily it has very little value.
Re: (Score:2, Informative)
Almost never will damages be covered. Come to think of it, I think in this case I can say "Damages will never be covered." You have to show value and proof of destruction of that value. Your homework being destroyed? Your dissertation being destroyed? While it may have a large amount of value to you, monetarily it has very little value.
Lost homework is usually only about 1-3 weeks of lost work. Often less. Dissertations are a whole different beast.
A lost dissertation has a lot more value than sentimental value. You've spent X years of your life working on it, with the clear expectation that you have a high probability of getting a PhD. Having a PhD means getting a job that pays better than the pay of a graduate student. If graduate student pay is $Y, and reasonable post-doctoral pay is $Z, and you lost X years of work due to the bug
Re: (Score:2, Insightful)
We don't expect hardware vendors to provide anything more than a replacement when thier products fail and I don't see why software should be any different.
Re: (Score:2)
This deleted a single file, and even if it were to delete every file on your hard drive, you'd still have the option of recovery software. A delete without an overwrite is as simple as pie to recover, so if you've spent years on your dissertation, just spend the hour or so it'll take to get it back, if you haven't backed it up. Before you say it, yes, this is an installer, but if your installer flattened a hard drive before installing its software, you're
Re: (Score:2)
The only thing you stand to lose is a few minutes (or hours) of production time due to a non booting system.
Re: (Score:2)
what if in those few hours (if you're not familiar with Windows at all and don't have a boot or rescue disk, etc. etc.) you needed access to those files? Do you file away every new e-mail to an external drive ready to be taken to the nearest computer cafe in case your machine goes wonky? I doubt it.
Do you expect to get paid by somebody every time your computer gets corrupted when you need to finish some vitally important work?
Also, the window was incredibly thin in which it took them to catch it... they have a couple hundred thousand players, and approximately 200 players got hit by it (I'm rounding, I know the number is larger) which indicates that the response time had to have been pretty quick, since the players were undoubtedly waiting with baited breath to download the patch as soon as the ser
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
Re:Straightforward, sure.. but... | also, the bug (Score:4, Insightful)
That's a good point. And generates some good advice for future student/gamers: Do not install any new software of any kind a week or two before a paper is due*
*at least, not without having some kind of back-up which can be read and worked on on another computer and which you regular test.
That sounds like the the opposite of a good way for delete to fail.
Re: (Score:2)
Well, over at my university we have deadlines every second week or so... that advice would pretty much require you to not keep your system up to date with patches. This would be why I backup my entire /home directory to an external drive that isn't connected when I'm not making the backups, and keep copies of important papers on a USB key I carry with
Re: (Score:3, Funny)
ITYM "Don't install an addictive game before a paper is due."
Re: (Score:2)
Isn't the first thing most people do on Vista is turn off the Administrator "Are you sure?" prompts?
(I know that personally I do not- I don't get them more than a half-dozen times a day, if that, so it's really not that big a deal.)
Cancel or allow? (Score:2)
Re: (Score:2)
And no, I'm not referring to Vista's behavior of demanding Admin rights for a ton of things.. though I don't have a direct problem with that.. if somebody does, have them run as administrator.
I'm only referring to popping up a big fat warning when you are (or something else is) about to do something to a critical system file where the change could very well leave the machine unbootable without a boot or rescue disc. As long as t
Re: (Score:2)
A major complaint with Vista is that it tends to pop up the UAC dialog for a lot of things - so people tend to run into it several times per day (personally it's only several times per week but, again, it's just a devtest machine for me right now.. though during setup I still only hit it a few times; just that the times I hit it w
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
Oh well. Thats what Windows users get for using a really bad file layout.
oh yes it is... (Score:2)
Its as fragile as boot.ini, though I personally have a few copies of it and
What linux needs is like the old VMS days of auto versioning, grub.conf;1 etc...
If its a system core component config, then its smart to do it for that, HD space is plenty for text files.
Re: (Score:2)
b) Why didnt you simply press 'e' at the grub screen? You can edit how it boots from its self.
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
In short, those people should have followed the EULA.
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
I disagree on this one. If I want to mess with my boot.ini or similar files as administrator, the operating system should not get in my way.
This is not limited to Windows by the way, the default settings of certain other systems are al
Re: (Score:3, Insightful)
There are more games to be played against other players than just fleet battles. You can fight allian
Re: (Score:2)
Re: (Score:3, Funny)
AND THEN they send GEEK SQUAD to "fix" your computer. Talk about adding insult to injury!
How is that even possible (Score:5, Insightful)
"Why doesn't Windows protect its system startup files? That's a good question, one that I have asked myself in these last few days and wish I knew the answer. But of course I'm not going to blame Microsoft for our mistake. Windows doesn't protect those files and therefore software developers must take care not to touch them. We should have been more careful."
That is a good question. I am not an EVE player myself so I don't know if this update had to be run with admin privileges but it doesn't appear to be that way from the question and reply. If you are not running as admin then how is it even possible to remove a system file that is necessary to boot the system. Unlike the EVE representative making this statement I am going to blame Microsoft, it should not be the developers responsibility to make sure they don't break the OS, it is the OS developers responsibility to make sure that it cannot be broken without admin/system/root access.
-Buck
Re:How is that even possible (Score:5, Insightful)
Two things to note:
Re: (Score:2)
Didn't Quake have an autoexec.bat file as a startup script?
Re:How is that even possible (Score:5, Informative)
Re: (Score:2)
Yup, Quake 1 and 2 have that file too (though it doesn't seem to be always present, unless created by the user - at least for me, it seems that the only game where it gets automatically created if it doesn't exist is Quake 1). It also seems to appear in Doom 3 and Quake 4, and I assume every game other game based on id engines.
Re: (Score:2)
This could indeed happen on any system. I saw a Perl script in Linux just today that said ${directory}/file. The directory variable was empty and it tried to write to /file. Fortunately, it didn't have permissions to do anything damaging. Hopefully it would have been better written if it did run with those permissions.
Didn't Quake have an autoexec.bat file as a startup script?
It can't happen on some systems like OS X.
/Applications , actually they are Directories looking like Applications. They just care about their own .app directory in /Applications .
There is no boot.ini -of course- but lets try deleting a system file necessary for booting
Ilgaz:etc ilgaz$ rm rc.common
override rw-r--r-- root/wheel for rc.common?
That would happen.
Applications doesn't even need to care what are in root or system init directories since they are in
Lets say they need to install/update a framework.
Re: (Score:3, Funny)
Well, that would require a group of people who have Vista installed.
Re: (Score:2)
Wrong, Vista no longer use a boot.ini file, changes to the boot process can only be made by running bootsect.exe in a CMD window.
Re: (Score:2)
Windows 2000 was released in 1999, XP in 2001, both use boot.ini - yet they say they named it in 2001 but say the name is there because of "legacy"? This could have happened back in 2001, they couldn't have used the "legacy" excuse then. I'd sooner they said 'yeah, we gave a file a silly name, and didn't realise'.
Re: (Score:2)
Re: (Score:2)
Technically it could've happened on Vista
Actually, it couldn't. Vista neither uses nor even has a boot.ini file (it's not even there in some legacy form). Vista's bootloader is rather more complex than ntldr, mostly (AFAIK) because it needs to be for BitLocker (Vista's full-drive encryption tool, which requires a separate boot partition since the entire system volume gets encrypted). This new bootloader also uses a different configuration store, and boot.ini has been removed entirely.
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
Re: (Score:3, Interesting)
I did patch EVE as a non-privileged user on my XP Pro system and the problem didn't happen to me. It does seem to be that since most people basically have to run as an administrative account to make XP "work", CCP was able to damage the OS as they did.
This is a multi-part failure. One part Microsoft for making an OS that almost requires standard users to run a privileged account all the time to make basic applications work. One part CCP for developing software that damaged the underlying OS.
My only hope i
Re: (Score:2)
Re: (Score:3, Interesting)
"how is it even possible to remove a system file that is necessary to boot the system. Unlike the EVE representative making this statement I am going to blame Microsoft,"
The boot.ini file is actually protected. It is specifically marked as a System File, Read-Only and Hidden. This means that to modify the file you need to remove these attributes in a specific order first before you can modify or delete it, even if you are logged in as Administrator.
The only way to prevent software from doing bad things
Re: (Score:2)
According to the windows API docs you only have to remove the "read only" attribute (which you end up with among other things for files copied direct from CD so it is not unreasonable for an install scripting tool to be pretty agressive about removing it) to use deletefile
Re: (Score:2)
Uh, to produce it?
Re: (Score:2)
Having worked on games with and without a producer.... yeah, they earn their paycheck (and this is coming from one of the software engineers)
Re: (Score:2)
Re: (Score:2)
It's nice when companies are honest (Score:4, Interesting)
If only more companies were so honest and straight forward when they cockup. It almost makes me feel like playing EVE again. CCP can consider themselves as being given a virtual karma bonus.
Although I can't help but wonder if the "honesty is the best policy" choice was because of their handling of the last PR cockup.
Re: (Score:2)
I'd probably give it another go, it's not really that bad for an online spreadshzzzzZZZZZZ
Re: (Score:2)
Pvp is pretty awesome in Eve, but there are a lot of parts in the game that could really use some improvmezzzZZZZzzzzzZZZ
Re: (Score:2)
Only half the answer we need (Score:2)
It's in the eight post of this [eve-online.com] thread.
Alright! (Score:4, Funny)
Re: (Score:2)
What those users with XP/Vista dual boots were probablly seeing is the same fallback that protected people with just a single XP install on the first partition.
I cant help but wonder... (Score:5, Interesting)
You see, until this bug happened EVE was totally off my RADAR screen. When I read about the bug on
If it hadn't been for this bug, I probably would have never bought their product! They say that any publicity is good publicity and I think this is true. Sure the SNAFU was pretty bad yet the product was still compelling enough to buy it despite a pretty bad QA miss. This latest response from the company will only help further get their name out there and is truly an opportunity to make lemonade from lemons.
Re: (Score:2)
boot.ini ? heh (Score:2)
That was a very, very good analysis of the problem (Score:4, Informative)
I also wonder if they wouldn't benefit from a nice virtual environment system to do QA testing of new releases with? Capturing the full graphical behavior of an OS is difficult in virtual systems, due to the overhead of the virtualization itself, but it might be a lot cheaper than keeping a dozen different hardware configurations around.
Re:That was a very, very good analysis of the prob (Score:2)
Re:That was a very, very good analysis of the prob (Score:2)
There are no solutions for running 3D accelerated apps (like EVE) in a VM that aren't still considered "beta/in testing" (like VMWare Fusion).
Re: (Score:2)
Package Management (Score:2)
These sort of problems are not something that should be occuring in a modern operating system.
Re: (Score:2)
Re: (Score:2)
An rm -rf in an install script will not do anything to the system.
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
On debian the upstreams installation script/target is typically only used to copy the files to a staging area during package build (though if you are lazy and build packages as root it can still do damage if it is buggy). But there are scripts that are part of the package which are run when the package is installed or removed to allow the package to update configuration and so on. If those scripts are buggy then they can defi
I kept reading it as CCCP (Score:2, Funny)
Can you imagine how this happened? (Score:3, Funny)
Programming guy 2: Yeah finally.
*Programming guy 2 tries to make a joke*
Pr. guy 2: Hey pr. guy 1, look at this
Pr. guy 1: lol, you appended a del boot.ini
Pr. guy 2: Well, I'm going to take a coffee break
Pr. guy 1: Yeah, me too
Pr. guy 2: Wait, lets put a sticky-note on the board that we're done
Pr. guy 1: Sure
*Pr. guy 2 puts sticky on the notice board*
*both walk off*
*manager walks in*
*manager looks at the board*
Clueless manager 1: Nice, the work is finally done.
Cl. manager 1: Ahhh, I'm on a tight schedule. Lets send this file to the head programmer so he can compile everything.
*Tries to click close*
Cl. manager 1: What, changes have been made? Whatever, save.
Cl. manager 1: Ok, open outlook. Send. Done. Wow, I know this will be a spectacular release.
*Cl. manager walks of*
Installer "technology" (Score:4, Interesting)
Remember the happy days of "just copy" installs, which worked great on MacOs in the 90s? Upgrade to a new system? Just copy your "apps" folder over.
The question, "What kind of installer should our OS have?" is like asking, "Should we drink the red poison or the green one?" Just asking the question seals your doom.
MacOS installer is still like that (Score:2)
Re: (Score:2)
The thing about an "installer" is that you're already in trouble. You have to learn another language (looking at the knowledge base for InstallShield was a real eye-opener, things like "no longer crash when a case-statement expression is not constant" in like version 5 of the product), with no debugger and essentially no specified semantics, with buggy, inconsistent runtime support routines (such as the 'delete' land
Re: (Score:2)
Have you tried InnoSetup? (Score:2)
Link: http://www.jrsoftware.org/isinfo.php [jrsoftware.org]
Bad screwup by the installer maker (Score:2)
The right way to do it is that you can have inconsitencies, if a) there is a very good reason for it (here, there was none) and b) you make sure people notice. This can be done by makin
Re: (Score:2)
Since NSIS is open source, you may wish to help out a bit instead of trying to "fire" an open source developer (no idea how you'd do it)...
As for inconsistencies... I can guarantee you'd find lots more inconsistent crap in Microsoft systems any day...
Arrrgg Fucking registries and the like! (Score:2)
The first part of the problem is the bloody registry, the second part of the problem is the moron who decided to mix critical system configuration information with user space information, the third part of the problem is the lack of a programming philosophy of keep your own shit in your own space.
I think the following design principles would go a long way to solving this problem:
Historical Problem (Score:2)
Among other things, everybody was administrator. Which led to somewhat unhealthy design habits on the part of application developers, who often took the easy path of just dropping DLLs and such into the system directory. Including some of Microsoft's own developers, but I digress...
Today, it seems that Microsoft has recognized the problem and tries to contain i
Good response (Score:2)
as a software developer, I can't say I wouldn't make the same mistake in the same circumstances..
Ohhh. Intimate Details (Score:2)
Intimate Details about Eve put Online. I can't wait!
Re: (Score:2, Troll)
CCP write it as EVE on the website.
Re: (Score:3, Funny)
Worst part of it was, I was baking pecan butter tarts at the time. In an electric oven. They don't make UPSes for that.
Re: (Score:2)
How long is too long? (Score:2)
Re: (Score:2)
Re: (Score:2)
This really only ever happens on systems that are dual booting, it would be extremely rare for it to happen on a normal Windows box, most of the systems that were negatively affected were probably ones that were dual-booting other OSes from which the problem could be fixed.
It's just as much Windows' fault as CCP's if indeed Windows recovers fine when it's on the first partition on the hard drive b
Re: (Score:2)
They were "contacted by fewer than 215 users", seems like a lot for something is suppose to be "very rare", especially considering the patch was only live for less than 6 hours:
"...released on Tranquility at 22:04 GMT on 5 December.... The faulty upgrade had been pulled from Tranquility a few hours after the problem was discovered, at around 03:40 GMT."
Guess a lot of
Re: (Score:2)
I could maybe understand if this fixed a bug, but they created a patch to make it look prettier and ended up screwing with the OS. Isn't this like trying to fix a paint-chip in a hurry and destroying the wall?
it was a big release not just "prettier look". new engine, new content, etc. please see here [eve-online.com] for all the details. it just happens that the "prettier look" is packaged separately and only installable if your system supports it. everyone gets the bulk of the update.