6 ms·
Wow. That is extremely impressive that such a large company is able to get a fix out that quickly.
by cheeze 9y ago
Wow. That is extremely impressive that such a large company is able to get a fix out that quickly.
- aje403 9y agoIf it took much longer than that for bugs like this, all of the HN doomsday posts about the Facebook mass exodus might actually come true
- stochastic_monk 9y agoI think people leaving facebook en masse would be a good thing (TM) for society, not a doomsday. Fewer echo chambers, less disinformation, and people forced to make effort to contact each other.
- clarkenheim 9y agoIt will only be replaced with another echo chamber.
- lttlrck 9y agoHopefully multiple smaller ones.
- murukesh_s 9y agoAlready there - whatsapp, instagram oops...
- praneshp 9y agoHacker news....
- stochastic_monk 9y agoThis effect is partially muted by the fact that one can only see the vote status of one’s own post. There is still a tendency toward conformity, but at least the suggestion to vote with other readers isn’t apparent like it is on many content aggregators/discussion media.
- coolso 9y agoExcept downvoted posts here turn gray.
- hedora 9y agoWhich is why I make a point of logging in and upvoting the non-egregious ones.
- UncleEntity 9y agoYeah but I can predict pretty accurately which of my posts will get downvoted and they all have the same thing in common; they challenge the left-leaning groupthink common here. Some might claim they get downvoted because they are "low quality" to which I'd retort why spend a lot of time crafting a "quality" reply when you know it's going to be suppressed?
- mercer 9y agoWhile it might just be me, I find myself downvoting your comments purely because I find them low-quality noise (or worse) that I'd rather not see more of. I even tagged you as 'shitty commenter', which I don't do this too often. But with some commenters I'm just amazed at how they can consistently keep this up without tiring of it.
- bittermang 9y agoOh, look at them rush to White Knight their own bubble. "Not OUR echo chamber, no! We're different, you see, because reasons."
- 9y ago
- tomcooks 9y agoScuttlebutt, mastodon, Riot, gab, stack overflow, d.tube, the list goes on
- rimliu 9y agoSome crtical thinking would be good for a society. Tools are just tools.
- r3bl 9y agoI've been following Josip's work on and off for years now (he's probably on every big white hat hall of fame there is), and I'm pretty sure he wouldn't go public even if it took them a month to fix this. If he said in a public blog post that it took them a month to fix something so simple, I could see the shit storm aimed at Facebook on social networks (including here), but I highly doubt any user would be compromised.
- wolco 9y agoThe fix is probably 10 minutes but the deployment process, intake process and notification process took 3 1/2 hours
- neotek 9y agoIs there an article or blog post somewhere about what Facebook's deployment process is like? It must be a massive operation.
- chromelyke 9y agohttps://code.facebook.com/posts/270314900139291/rapid-release-at-massive-scale/ https://code.facebook.com/posts/270314900139291/rapid-releas...
- orastor 9y agoThey also use bittorrent: https://arstechnica.com/information-technology/2012/04/exclusive-a-behind-the-scenes-look-at-facebook-release-engineering/ https://arstechnica.com/information-technology/2012/04/exclu...
- styfle 9y agoWhat about code review process? Surely someone else verified the fix before deployment.
- ampersandy 9y agoFB uses Phabricator, which was spun out into an open-source project: https://www.phacility.com/phabricator/ https://www.phacility.com/phabricator/
- user5994461 9y agoIt's a trivial bug. If the parameter is invalid, return nothing, rather than return all the credit cards. I'd be worried if any company is not able to understand the problem and publish a patch in a few hours.
- compiler-guy 9y agoThe fix isn't the hard part. It's the deployment and validation that can take time. Pretty impressive.
- sundvor 9y agoYep, clearly shows the value of a properly configured CI/CD pipeline.
- ransom1538 9y agoYeah here it is: git pull; sh tests; rsync /prod/ all@prod:/var/www/ ^ That is copyrighted by the way. Ill take a consultant fee. I know - I know it should be thousands of lines of puppet, jenkins, hooks, Kubernetes, Salt, and 2 million lines of python and ELM all piped through Docker containers -- I am NOT an animal.
- xevb3k 9y agoEnterprise edition with test validiation and continuous deployment: while true; do git pull; sh tests && rsync /prod/ all@prod:/var/www/;done
- hedora 9y agoYou forgot to rewrite the logic in xml, and then fetch it over the internet from unknown third parties by tunneling it through json, then http. Bonus points if the the whole thing is deployed via docker hub.
- pronoiac 9y ago