5 ms·

The start/stop at the bottom makes that look like it's come canned with a CMS and they've just tacked on what they needed to. It's 90% boilerplate.

by soneil 4y ago

chx 4y ago
It's hardly a secret tesla.com is Drupal -- both that gitignore and the robots.txt shouts it quite loudly, to be fair. One of the larger Drupal agencies, Lullabot includes them in their clients list: https://www.lullabot.com/our-work https://www.lullabot.com/our-work and they are looking for a sr backend Drupal engineer https://www.tesla.com/careers/search/job/sr-software-engineer-backend-drupal-137554 https://www.tesla.com/careers/search/job/sr-software-enginee... which I would take if the company were not lead by Musk.
- ughitsaaron 4y ago
  More to that point, see https://www.tesla.com/MAINTAINERS.txt https://www.tesla.com/MAINTAINERS.txt
  - stefan_ 4y ago
    Is this a normal Drupal practice? You just deploy the Git repo?
    - extheat 4y ago
      Do you deploy confidential information into the repo ? That would be the root problem.
      - mynameisvlad 4y ago
        Things don't have to be confidential to be an issue. Leaking the actual maintainer's names (as opposed to the Drupal list), for instance, would not necessarily be considered confidential, but still an issue if it showed up.
      - verbify 4y ago
        Usually passwords or keys are stored in a config file, and that is stored in a place outside the repo.
    - chrismeller 4y ago
      I think, generally speaking, it’s a PHP standard practice and more broadly a scripting language practice, though it doesn’t really apply to Node. No pre-compiling is required, so you just ship the files. Especially true for anything that offers an Apache module (like mod_php).
      - remram 4y ago
        Ship the files sure, ship the top-level folder not really. Most sites will have a "public" subfolder or equivalent, so the READMEs, scripts, sources etc don't get served. Either way, a professional would remove those files or block them at the HTTP server level.
        chrismeller 4y ago
        Ehhh, I don’t know if I agree that most will have anything.
      - rbanffy 4y ago
        > more broadly a scripting language practice, I can tell you it's not the case with Python.
        chrismeller 4y ago
        Interesting, because that and mod_python were what I was thinking of aside from PHP. What’s the workflow there like?
        rsynnott 4y ago
        Well, I mean, that might have been somewhat standard practice with mod_python the last time anyone used mod_python, which I would assume was about 15 years ago. Looks like it's been dead since 2010: https://en.wikipedia.org/wiki/Mod_python https://en.wikipedia.org/wiki/Mod_python In practice, I think modern Python webapps usually use WSGI or similar, where you wouldn't be just dumping a bunch of files somewhere.
  - ughitsaaron 4y ago
    You can compare it to the current version of the same file in the most recent Drupal release https://github.com/drupal/drupal/blob/9.5.x/core/MAINTAINERS.txt https://github.com/drupal/drupal/blob/9.5.x/core/MAINTAINERS...
    - chx 4y ago
      D10 will be out soon :)
- capableweb 4y ago
  Not to mention a lot of the subsequent requests when loading https://www.tesla.com/ https://www.tesla.com/ contains the HTTP header+value "x-generator: Drupal 9 (https://www.drupal.org https://www.drupal.org)" So yeah, not exactly a secret.
  - andirk 4y ago
    And for the lay man: https://builtwith.com/tesla.com https://builtwith.com/tesla.com . Haven't seen Drupal in the wild for years. Good on them!
    - capableweb 4y ago
      Probably you have, lots of websites still using Drupal, heavily customised of course. Search for "websites made with Drupal" and have your jaw dropped, as probably a website or two you visited recently will show up :)
    - deleted 4y ago
      [deleted]
    - chx 4y ago
      Then you aren't visiting too many US government sites , most of the are on Drupal.
Neil44 4y ago
And the bumph at the top - crawlers run by Yahoo! and Google - lol
- judge2020 4y ago
  It’s the default drupal robots.txt it seems. https://api.drupal.org/api/drupal/robots.txt/5.x https://api.drupal.org/api/drupal/robots.txt/5.x

The start/stop at the bottom makes that look like it's come canned with a CMS and they've just tacked on what they needed to. It's 90% boilerplate.

by soneil 4y ago

The start/stop at the bottom makes that look like it's come canned with a CMS and they've just tacked on what they needed to. It's 90% boilerplate.

chx 4y ago

It's hardly a secret tesla.com is Drupal -- both that gitignore and the robots.txt shouts it quite loudly, to be fair. One of the larger Drupal agencies, Lullabot includes them in their clients list: https://www.lullabot.com/our-work https://www.lullabot.com/our-work and they are looking for a sr backend Drupal engineer https://www.tesla.com/careers/search/job/sr-software-engineer-backend-drupal-137554 https://www.tesla.com/careers/search/job/sr-software-enginee... which I would take if the company were not lead by Musk.

ughitsaaron 4y ago
More to that point, see https://www.tesla.com/MAINTAINERS.txt https://www.tesla.com/MAINTAINERS.txt
- stefan_ 4y ago
  Is this a normal Drupal practice? You just deploy the Git repo?
  - extheat 4y ago
    Do you deploy confidential information into the repo ? That would be the root problem.
    - mynameisvlad 4y ago
      Things don't have to be confidential to be an issue. Leaking the actual maintainer's names (as opposed to the Drupal list), for instance, would not necessarily be considered confidential, but still an issue if it showed up.
    - verbify 4y ago
      Usually passwords or keys are stored in a config file, and that is stored in a place outside the repo.
  - chrismeller 4y ago
    I think, generally speaking, it’s a PHP standard practice and more broadly a scripting language practice, though it doesn’t really apply to Node. No pre-compiling is required, so you just ship the files. Especially true for anything that offers an Apache module (like mod_php).
    - remram 4y ago
      Ship the files sure, ship the top-level folder not really. Most sites will have a "public" subfolder or equivalent, so the READMEs, scripts, sources etc don't get served. Either way, a professional would remove those files or block them at the HTTP server level.
      - chrismeller 4y ago
        Ehhh, I don’t know if I agree that most will have anything.
    - rbanffy 4y ago
      > more broadly a scripting language practice, I can tell you it's not the case with Python.
      - chrismeller 4y ago
        Interesting, because that and mod_python were what I was thinking of aside from PHP. What’s the workflow there like?
        rsynnott 4y ago
        Well, I mean, that might have been somewhat standard practice with mod_python the last time anyone used mod_python, which I would assume was about 15 years ago. Looks like it's been dead since 2010: https://en.wikipedia.org/wiki/Mod_python https://en.wikipedia.org/wiki/Mod_python In practice, I think modern Python webapps usually use WSGI or similar, where you wouldn't be just dumping a bunch of files somewhere.
- ughitsaaron 4y ago
  You can compare it to the current version of the same file in the most recent Drupal release https://github.com/drupal/drupal/blob/9.5.x/core/MAINTAINERS.txt https://github.com/drupal/drupal/blob/9.5.x/core/MAINTAINERS...
  - chx 4y ago
    D10 will be out soon :)
capableweb 4y ago
Not to mention a lot of the subsequent requests when loading https://www.tesla.com/ https://www.tesla.com/ contains the HTTP header+value "x-generator: Drupal 9 (https://www.drupal.org https://www.drupal.org)" So yeah, not exactly a secret.
- andirk 4y ago
  And for the lay man: https://builtwith.com/tesla.com https://builtwith.com/tesla.com . Haven't seen Drupal in the wild for years. Good on them!
  - capableweb 4y ago
    Probably you have, lots of websites still using Drupal, heavily customised of course. Search for "websites made with Drupal" and have your jaw dropped, as probably a website or two you visited recently will show up :)
  - deleted 4y ago
    [deleted]
  - chx 4y ago
    Then you aren't visiting too many US government sites , most of the are on Drupal.

Neil44 4y ago

And the bumph at the top - crawlers run by Yahoo! and Google - lol

judge2020 4y ago
It’s the default drupal robots.txt it seems. https://api.drupal.org/api/drupal/robots.txt/5.x https://api.drupal.org/api/drupal/robots.txt/5.x