+ fix written by the supplier, in test
+ link-drop events: new engineering framework
- the cure is still a national restartAt ten in the morning, one routine request inside Britain's flight data system gets interrupted at exactly the wrong millisecond, and by evening more than two thousand flights are delayed, cancelled or diverted. That's from the preliminary report by Nats, the UK's air traffic service. No sign of an attack, and nobody pressed the wrong button. Just a legacy defect, and one very specific millisecond. How it happened, why one millisecond was enough, and who actually gets the blame.
Ten o'clock. Someone asks by hand for a squawk code, the four-digit number that ties a radar blip to its flight plan. The request is valid, and so is the plan. Ten oh two. The link between London Area Control and the core system drops, then comes back by itself after forty-five seconds. The ticket says recovered, stable, no operational impact. Twelve thirty-two. The link starts dropping again, faster each time, and controllers lose some automation. By twelve forty-five, UK departures are stopped. At one thirty-two, the link drops and stays down.
The cure is a controlled restart, and that's the expensive part, because the same system feeds control centres and airports across the country. The bug lives in London's airspace. The restrictions cover the whole UK. The restart runs from a quarter past three to ten past four, and untangling the duplicate flight plans takes until ten to seven. So why was a millisecond enough? The system juggles jobs by priority, and pausing a small job for an urgent one is normal. But this job was part-way through updating a value. The urgent message lands inside that millisecond, and the update stops halfway. When it resumes, it doesn't resume correctly.
The bad data then leaks into some of the later flight updates. London tries to read one, takes too long and times out. A timeout drops the link, as designed, to protect both systems. The safety feature works perfectly. That's the problem. The report's own words. Had the urgent message arrived one millisecond earlier or later, the update would have completed normally. On Hacker News, one programmer calls a millisecond an absolute eternity, guaranteed to happen by Tuesday this week. It was a Tuesday. git blame. The legacy code, fifty percent, for an update that can be paused halfway and comes back wrong. The restart plan, thirty, because one bad record in London means restarting the whole country's flight data. The ten oh two alarm, fifteen, for healing itself and getting filed as no impact. Five percent to the millisecond, for its timing.
Blast radius. Nats planned for about eight thousand flights that day and handled about six thousand. UK departures stopped for about four and a half hours, and the backlog took over two days to clear. It's Britain's third air traffic failure in three years, and the chief executive calls this bug very, very obscure. Verdict, postmortem: needs review. The report is fast and specific, and the fix is written and in testing. But the plan is a faster restart, not a smaller one. Monday line: if a job can be paused, make its write atomic, and treat an alarm that heals itself as an alarm. Send me the incident you're still not allowed to talk about, in the comments, or at thedailydiff.dev.
Verdict: NEEDS REVIEW — honest report, same national restart
Sources
https://www.nats.aero/news/nats-publishes-preliminary-report-on-technical-incident-of-8-september/
https://www.nats.aero/wp-content/uploads/2026/09/NATS-Preliminary-Investigation-Report-into-NAS-Incident-on-08-Sept-2026-Issued-16-Sept-2026.pdf
https://www.bbc.co.uk/news/articles/cw0kl1571lpmo
https://www.theguardian.com/world/2026/sep/18/flight-chaos-affecting-hundreds-of-thousands-caused-in-millisecond-by-software-error-uk
https://news.ycombinator.com/item?id=49754064
https://x.com/NATS/status/2097313182482084317
https://x.com/NATS/status/2097350804432720179
https://x.com/NATS/status/2097393274403033197
And that's the diff for today. I'm Niko from Axrisi. Merge responsibly.
YouTube · thedailydiff.dev · forward this to the intern who deployed on Friday.