<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Misc on Designing Secure Software</title>
    <link>https://designingsecuresoftware.com/tags/misc/</link>
    <description>Recent content in Misc on Designing Secure Software</description>
    <generator>Hugo -- gohugo.io</generator>
    <language>en</language><atom:link href="https://designingsecuresoftware.com/tags/misc/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>Against the Leap Year</title>
      <link>https://designingsecuresoftware.com/writings/time-leaps/</link>
      <pubDate>Sun, 18 Oct 2026 15:46:46 +0900</pubDate>
      <guid>https://designingsecuresoftware.com/writings/time-leaps/</guid>
      <description>&lt;p&gt;I was very disappointed to read
&lt;a href=&#34;https://www.smithsonianmag.com/smart-news/its-official-timekeepers-have-gotten-rid-of-the-leap-second-and-introduced-the-leap-hour-instead-180989685/&#34;&gt;that our standards body would implement a leap year&lt;/a&gt;:
talk about kicking the can down the road.
We are reverting to the centuries old system at this point; really?&lt;/p&gt;
&lt;p&gt;The bureaucracy is such that (from a quick search) I was unable to find the actual specification not behind a paywall, but the decision to use a leap year is clear, and in my view completely unacceptable. The rationale seems to be that any change would require a major software overhaul a la Y2K, but legacy code and continue using UTC (as the APIs should be specified to do already) and move to the new system by choice in the future.&lt;/p&gt;
&lt;p&gt;Here’s a quick take on a better system, presented in LLM-written form to convey the idea: if anyone with any influence ever notices it’s easy to write up. The idea is obvious but apparently never considered. Did they over-think it or had nobody with software experience involved?&lt;/p&gt;
&lt;h2 id=&#34;the-dual-scale-timekeeping-proposal&#34;&gt;&lt;strong&gt;The Dual-Scale Timekeeping Proposal&lt;/strong&gt;&lt;a class=&#34;anchor&#34; href=&#34;#the-dual-scale-timekeeping-proposal&#34; aria-hidden=&#34;true&#34;&gt;🔗&lt;/a&gt;
&lt;/h2&gt;
&lt;p&gt;This architecture eliminates mandatory software rewrites, preserves legacy systems entirely, and introduces the celestial scale as a completely opt-in, gradual extension.&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;&lt;strong&gt;Backward Compatibility &amp;amp; Legacy Protection:&lt;/strong&gt;
&lt;ul&gt;
&lt;li&gt;Existing APIs, databases, and operating systems continue to use UTC-Atomic by default, exactly as they are currently specified. Zero changes are forced on legacy codebases or embedded systems.&lt;/li&gt;
&lt;li&gt;The new celestial API extensions are introduced as optional, non-blocking additions with no strict migration deadlines. Applications adopt them only when and if the specific benefits outweigh the engineering cost.&lt;/li&gt;
&lt;/ul&gt;
&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Opt-In Application Semantics &amp;amp; UI Convenience:&lt;/strong&gt;
&lt;ul&gt;
&lt;li&gt;Applications choose their native scale based on need. High-speed and digital infrastructure remains anchored to continuous atomic time.&lt;/li&gt;
&lt;li&gt;For human-facing applications, developers can optionally use the celestial format strictly as a display convenience (e.g., rendering a timestamp in local solar time) or output both, while underlying data structures remain untouched. Most short-lived applications will never need to adopt it.&lt;/li&gt;
&lt;/ul&gt;
&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Contractual and Future-Dated Logic:&lt;/strong&gt;
&lt;ul&gt;
&lt;li&gt;Legal and commercial contracts already rely on explicit calendar dates and human-readable context.&lt;/li&gt;
&lt;li&gt;For future-dated transactions, commitments are recorded with nominal human intent. As the target date approaches, exact observational offsets are applied to map the intent to the precise atomic execution point—rendering the projection perfectly precise when precision matters, while high-precision financial contracts can mandate UTC execution directly from inception.&lt;/li&gt;
&lt;/ul&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;h2 id=&#34;comparative-evaluation-vs-the-cgpm-policy&#34;&gt;&lt;strong&gt;Comparative Evaluation vs. the CGPM Policy&lt;/strong&gt;&lt;a class=&#34;anchor&#34; href=&#34;#comparative-evaluation-vs-the-cgpm-policy&#34; aria-hidden=&#34;true&#34;&gt;🔗&lt;/a&gt;
&lt;/h2&gt;
&lt;p&gt;Without requiring software changes the comparison is one-sided against this decision.&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;&lt;strong&gt;Preservation of Human Time Alignment:&lt;/strong&gt; Allowing civil time to drift will confuse and complicate agriculture, marine navigation, and daily human sense of time, this is an avoidable degradation of civil timekeeping.&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;Separation of Concerns:&lt;/strong&gt; Machines require absolute monotonicity (no jumps, no slips), while humans require solar alignment. Forcing them onto the exact same timeline requires a compromise that satisfies neither perfectly, but this model decouples them cleanly.&lt;/li&gt;
&lt;/ul&gt;
&lt;h2 id=&#34;conclusion&#34;&gt;Conclusion&lt;a class=&#34;anchor&#34; href=&#34;#conclusion&#34; aria-hidden=&#34;true&#34;&gt;🔗&lt;/a&gt;
&lt;/h2&gt;
&lt;p&gt;Setting aside institutional inertia, the dual-scale opt-in model is architecturally cleaner and logically superior to letting civil time slip by an hour, because it achieves absolute machine precision without sacrificing the integrity of human solar time.&lt;/p&gt;
</description>
    </item>
    
  </channel>
</rss>
