It&#x27;s not that surprising that it has a problem with error, because the reality is, there&#x27;s no correct solution for dealing with this kind of error.<p>The first question, of course, is &quot;how do you determine when there&#x27;s an error?&quot; Half the GPS constellation was broadcasting the data, and for almost all purposes it was &#x27;correct&#x27; data, other than being wrong. Perhaps ground stations could determine that they&#x27;re getting different data from different satellites (if they have some good ones in view), or maybe they could just decide that the new parameters differed enough from the old ones to be implausible, but neither of these is a cut and dry &quot;I definitely have an error&quot; ... but let&#x27;s say you have a foolproof way to determine that A0&#x2F;A1 are incorrect. Great. THEN what do you do?<p>You could just decide to use the previous value for that parameter... which is great for a single clock, but what about clocks elsewhere that have a different value (the one being broadcast by the rest of the satellites) or an out of date value (say, a clock that was powered off while traveling in a broadcast van)? Barring external communication, you could have an arbitrary number of different interpretations of the current time -- a different one for each ground station!<p>You could also just accept that the new parameters are correct, but how do you then get your clock to the new correct time, without having a second (or other time period) that&#x27;s significantly longer or shorter than a second? There&#x27;s a lot of gear that expects a second to be a specific length, which is not gonna be happy if the length changes. (Think of playing back an audio file that&#x27;s exactly 30 minutes long, and needs to start and stop at specific times, down to the bit. You then configure your system to send one bit every (1&#x2F;bitrate) seconds exactly. How does that system recover when 13µs of bits go missing? How do you coordinate that behavior over multiple disconnected systems around the world which may have gotten the same information at different times (or not at all)?<p>From reading the article, it <i>sounds</i> like what happened was that the units didn&#x27;t <i>fail</i> because of the GPS issue, but that they start throwing alarms (probably while going into a mode where they ran off only their internal (disciplined) oscillator. This seems like absolutely the right thing to do -- &quot;uh, boss, things look really not-right here, and I can&#x27;t fix it without breaking something, you really need to come deal with this yourself.&quot; (Note the comments about &#x27;thousands of system warnings&#x27; but none about &#x27;cellphones broke.&#x27;) This is, from what I can see, really the only reasonable behavior these devices could have.<p>(disclaimer: I don&#x27;t have any direct data on what broke vs. what complained loudly and woke people up. I&#x27;d love to have some solid, not-parsed-by-the-tech-media data on this topic, if anyone has any.)