Therac-25: What went wrong?

• Paradigm Shift

• Therac-25 replaced expensive hardware safety interlocks with software controls

• Real-time software

• Design

• Race condition caused focusing element to be incorrectly set

• No indication of actual hardware settings

• Error messages appeared the same regardless of how important

• Error messages were difficult to understand

• All errors messages could be manually overridden