Southwest’s tech debt hurt it back in 2022 but it seems to be doing it some favors today.

Old Windows taketh away, but sometimes old Windows giveth.

https://www.digitaltrends.com/computing/southwest-cloudstrike-windows-3-1/

EDIT: Fix date

EDIT: @peterbutler pushed me to do a little more research, and I’m more comfortable saying it the underlying software probably dates to Windows NT or XP.

A Windows version from 1992 is saving Southwest’s butt right now

Southwest hasn't been impacted by the CrowdStrike outage, and that's reportedly because it's still running Windows 3.1.

Digital Trends

And yes, it’s true. Some links with additional context:

https://www.forbes.com/sites/hershshefrin/2022/12/31/can-southwest-airlines-fix-its-systemic-weaknesses-in-the-new-year/

https://finance.yahoo.com/news/southwest-unions-warned-company-outdated-145652723.html

https://www.dallasnews.com/business/airlines/2022/12/29/holiday-meltdown-exposes-southwest-airlines-technology-woes/

Essentially Southwest self-built/modified its own booking systems, ensuring long-term technical debt, and has been maintaining them since the ’90s and early 2000s.

(EDIT for updates after additional research)

Can Southwest Airlines Fix Its Systemic Weaknesses In The New Year?

Southwest Airlines has a systemic problem that greatly exacerbated its December flight cancellation fiasco. The company appears to have an Achilles’ heel when it comes to capital budgeting decisions about infrastructure.

Forbes

@ernie

but … where is the evidence stuff is running on Windows 3.1?

I see quotes about Windows 95 in the Forbes and Morning News articles but nothing about 3.1

Dallas:

>> “Some systems even look historic like they were designed on Windows 95.”

Forbes:

>> By some accounts, major portions of Southwest’s scheduling system for pilots and flight attendants is built on the Windows 95 platform

@ernie The 3.1 headline seems to come from a single Twitter account:

https://x.com/ArtemR/status/1814206932993118695

Which seems like it might be a joke?

Artem Russakovskii (@ArtemR) on X

Delta, United, American Airlines flights are all grounded right now. The reason Southwest is not affected is because they still run on Windows 3.1. https://t.co/ezFubvKVNA

X (formerly Twitter)

@peterbutler This document from the Air Line Pilots Association has screenshots of the software in question. https://www3.alpa.org/LinkClick.aspx?fileticket=IO7kd%2Bfm2Do%3D&tabid=11702&mid=33968

“Crew Web Access” appears to be a primitive, ’90s-era web interface, accessed through a browser webview on a smartphone, that offers crew members access to the software: https://appadvice.com/app/crewweb/391782836

@peterbutler Per this document, the original developer of the SkySolver software is Julian Pachon, who developed the software for Navitaire in the early 2000s. (Per his LinkedIn page, which I won’t link, Pachon now works in logistics tech for Amazon.) https://link.springer.com/article/10.1057/palgrave.rpm.5160041

The trademark dates to 2004: https://trademarks.justia.com/785/09/skysolver-78509597.html

Vehicle fleet planning in the car rental industry - Journal of Revenue and Pricing Management

Fleet management at car rental companies aims to maximise yield by matching capacity to current and projected demand. This is accomplished via three decision-making phases. The first phase involves the grouping of car rental locations into pools, allowing car rental locations within a pool to share a fleet of vehicles. In the second phase, the types and quantities of vehicles to be acquired and returned to the car manufacturer and the geographical redistribution of vehicles among pools over the long-term planning horizon are defined for each pool. The final phase involves the daily operations in which the deployment of the fleet within each pool among its locations is defined. In this paper, we address all three phases as we encountered them in a major US car rental company. We develop appropriate solution methodologies for all three phases taking into account the hierarchical nature of the decision process. Finally, the application of the entire methodology is exhibited via a case analysis for the state of Florida.

SpringerLink

@peterbutler However Navitaire has been in this space a long time, purchasing its first software package, Open Skies, in 2000 from HP.

OpenSkies dates to the ’90s and earlier and ran on HP minicomputers until they stopped selling the hardware, forcing Navitaire to upgrade and rebuild. https://books.google.com/books?id=hyDkcWWyD_4C&pg=PA20

So to answer your question, the software is old and has a legacy that goes back to the Win 3.1 days, at least, but is more likely to be running on XP or Win 2000.

Computerworld

For more than 40 years, Computerworld has been the leading source of technology news and information for IT influencers worldwide. Computerworld's award-winning Web site (Computerworld.com), twice-monthly publication, focused conference series and custom research form the hub of the world's largest global IT media network.

Google Books
@ernie I used to work on airline pricing software. We would have liked to be able to return prices for Southwest flights, but they didn’t publish them. Allegedly, they kept all their fares in an Excel spreadsheet.
@ernie I always thought that it wouldn't matter anyways, as the OS is mostly used for printer drivers and hosting a shell to VMS or IBM mainframes…

@ernie This makes me wonder how much software is still running on some flavor of VMS. I know that 10 years ago, I'd heard of a few shops where some legacy app was still hosted in VMS. Per Wikipedia, OpenVMS had an update earlier in 2024, so presumably a few orgs still have mission-critical stuff still running on it.

(My first college programming course used UCSD Pascal on VAX/VMS, running on DEC VMS hardware, circa 1992.)

#ScottRambles

@scottmiller42 @ernie There are sites still running OpenVMS, yes.

The current vendor VSI ported OpenVMS to x86-64, as well.

And for completeness, there have been cases of malware including viruses on VMS. Rare, but it has existed. The worms including WANK were a bit more widely known.

@ernie Meme-guy-tapping-head: "Running Windows that is too old to run Cloudstrike (or any other modern security software suite)."

https://knowyourmeme.com/memes/roll-safe

Roll Safe | Know Your Meme

Roll Safe is an image macro series featuring a screenshot of actor Kayode Ewumi grinning and pointing to his temple while portraying the character Reece Si

Know Your Meme
@ernie Reminds me of the Wall St firm that got saved from ransomware by Netware.
@ernie Wait, a few months ago? The meltdown was over a year and a half ago. Did I miss some other incident this year?
@garlickles I just misremembered the date when I wrote the post, nothing more nothing less.

@ernie

"Looks like you're trying to pilot a commercial aircraft. Can I help?"

@ernie

IIRC, Windows 3.1 would not auto-update even if you had Trumpet installed. 🙂

@ernie The implicit assumption seems to be that if they had updated to a modern OS, the temptation to install CrowdStrike would be irresistible. Or maybe at least leave them open to accusations of not following best practices (more so than depending on Windows 3.1? Maybe??). Seems like an interesting case for assignment of liability.
@dan131riley I also think that there’s a good chance that trying to build a system like this in 2023/2024 would probably be done with Linux rather than Windows. Their technical debt is such that starting over with the best foundation is best, and when all the other companies built their systems they probably built on Windows because FOSS wasn’t as popular then as it is now.
@ernie@writing is there a point where a corporation can be held liable for technical debt? seems like an interesting question? (and OMG most of these systems were built to talk to bespoke OS/360 apps and the current backend is probably z-series with Windows the easiest frontend integration platform)
@dan131riley I think liability would probably emerge if it led to a major crime like fraud or negligence. If a plane crashed because they weren’t updating their systems for instance that would be a factor, or if it caused the theft of PII or financial data.

@ernie omg. My wife is supposed to fly Southwest today and she just told me that Southwest says everything is fine, and I thought, “Maybe because they’re running on PDP-11s or something.”

Guess I was right.

@ernie I figure a cranky old IBM System 370 or 390 was what saved them.
@ernie At my last job whenever a system was saved from the latest kernel bug by being old as dirt, we would refer to this as "security through maturity".
@ernie You mean newer version are just enhanced 3.1, lol. I didn't work on the OS, but damn, I'm getting Golf 3.0 out (I have a whole in one), and I bet it works in 11!
@ernie @peterbutler

Reminds me of the recent SSH bug: it impacted RHEL 9 (and other, newer distos), but a lot of my customers are still on RHEL 7 or only recently updated to RHEL 8 and were, thus, not impacted.

@ernie okay now that is actually hilarious. I remember uncovering an old PC that my grandfather had to write his memoirs.

That thing was running 3.1, and he refused to get anything newer because he loved the simplicity of it.