3 ms·
If anyone's wondering if this answers the Actual Question of why the cert was allowed to expired, don't waste your time, it doesn't. I guess implicitly that's a
by ghostly_s 7y ago
If anyone's wondering if this answers the Actual Question of why the cert was allowed to expired, don't waste your time, it doesn't. I guess implicitly that's a "social detail"?
- Someone1234 7y agoWhat are you after? This clearly says they screwed up and that internal procedures need to be changed so it cannot recur. If this was in fact an oversight/accident, what other kind of explanation can they give? > This was due to an error on our end: we let one of the certificates used to sign add-ons expire And: > We clearly need to adjust our processes both to make this and similar incidents it less likely to happen and to make them easier to fix.
- tedunangst 7y agoWell, they could tell us what the previous process was. Was the cert renewer on vacation, or was the wrong date entered on the calendar, or? How was it supposed to work? I think a lot of people are curious about that.
- bpfrh 7y agoThey said they will make a formal post-mortem investigation as well as make a post about what they will change. I think the information will be contained in one of the two posts?
- tedunangst 7y agoSure? But someone basically said there's nothing more to be learned or discussed.
- c0vfefe 7y agoIt's understandable to be curious about that, I am myself. But I don't think they owe us that. It might be sensitive information, anyway.
- sfink 7y agoThe post-mortem hasn't happened yet. ekr's post is a preliminary description of what happened, everything he felt confident saying in advance of the post-mortem and so necessarily heavy on technical details but light on process details.
- djsumdog 7y agoI mean, it's fair to say it's oversight? I wonder if the post-mortem will reveal if it was on someone's radar and slipped through the cracks or if it was never put into the schedule system they use for certification expiration to begin with.
- ghostly_s 7y agoYes I saw that, I just wish he had mentioned this at the top of the post (which currently reads " I wanted to walk through the details of what happened, why, and how we repaired it.") instead of near the bottom.
- silversconfused 7y agoI really don't get why everyone thought putting dead-man-switches ON EVERYTHING was a good idea. Boils my blood thinking about it. So wasteful. Such disrespect for the future. But hey, security. Can't argue with that!
- brokenmachine 7y agoSubscription culture and endless updates/rewrites. For Sisyphus, nothing is ever complete.