6 ms·

That's what I never understood about this story; did you guys have any suspicion it would dump radiation into the patient all at once, or was this like a concur

by aliqot 4y ago

That's what I never understood about this story; did you guys have any suspicion it would dump radiation into the patient all at once, or was this like a concurrency bug

chaps 4y ago
We weren't able to reliably install security daemons on a client's machine because the entire automation system didn't account for autoscaling. The issues were raised well before I joined and the project head legitimately didn't understand it as a problem that needed solving. The hosts were for a presidential candidate's webserver, and they noticed the webservers were missing security daemons days before the election.
- aliqot 4y ago
  jeez thats a rough spot to be in. did you stick around to fix it or just get the hell out of dodge after that?
  - chaps 4y ago
    I did what I could with a handful of selenium scripts, then hit a road block because we didn't have ssh access to a chunk of the autoscaling hosts. Gave up after that, told the customer rep to tell them we can't do it, and gave my two week notice about a month later.
    - aliqot 4y ago
      Ouch, that has to be rough to endure. I'm glad you seem to be in a better place now. Good on you for doing the right thing and getting the hell out of there when your options ran out.
- DiggyJohnson 4y ago
  Maybe I'm missing a joke, but was your client HRC's campaign?(?!)
  - aliqot 4y ago
    That's not important and this ain't the place to ask otherwise they'd have told us.
    - DiggyJohnson 4y ago
      > this ain't the place to ask Am I double-whooshing here? How is a Hacker News comment thread not the right place to respectfully ask questions in response to interesting comments. I know I'm not entitled to an answer, nor do I intend to start a flame war. Sheesh
      - aliqot 4y ago
        It is personal information that risks identifying them more than they already had at the time of posting. It took about two seconds to put everything together. I don't have a dog in this fight politically one way or the other, people don't need to identify themselves IRL here.
        DiggyJohnson 4y ago
        Who are you to decide what others are comfortable sharing on here. It is quite literally as simple as the person I replied to choosing not reply to my comment. Why is this issue a concern to you? > I don't have a dog in this fight politically one way or the other Neither do I. > people don't need to identify themselves IRL here I don't think they do either. Why are you assuming I "needed" this information?
        chaps 4y ago
        Can you not? They're right.
        DiggyJohnson 4y ago
        Can I not what? Why won’t either of you respond to my core argument: GGP does not need to respond to my comment if they’re not comfortable. Me asking the question is not me demanding a response.
- riffic 4y ago
  are "security daemons" truly necessary though? this whole thing sounds like a troll with enough convincing language to seem plausible
  - chaps 4y ago
    We could debate security daemons until our minds bleed, but.. man, I wish that all didn't happen.
  - 77pt77 4y ago
    Without the security daemons you risk a flux capacitor overload and that leads to it being exploitable via pointer wraparound.
    - riffic 4y ago
      in that case I'll throw on my wraparound shades.. and deal with it
- outworlder 4y ago
  > security daemons AKA compliance checkbox crap? If infrastructure is immutable (which makes it work even better for autoscaling), nothing new will get installed unless you build a new image. Export whatever data you require to ensure things you want to be running are running. Monitor entry and exit points. What is left for the "security deamons" to do?
whats_a_quasar 4y ago
Huh? Are you assuming that the parent comment is about someone programming a medical device?
- deleted 4y ago
  [deleted]
- lifeisstillgood 4y ago
  I'm think it's a meta joke - Therac-25 (https://en.m.wikipedia.org/wiki/Therac-25 https://en.m.wikipedia.org/wiki/Therac-25) was a radiotherapy machine from the early 1980s and is (in)famous for having software failed and killed I think dozens of people. It's become a well known case study, but it's highly unlikely anyone on HN worked on it - I think that's the joke.

by aliqot 4y ago

That's what I never understood about this story; did you guys have any suspicion it would dump radiation into the patient all at once, or was this like a concurrency bug

chaps 4y ago

We weren't able to reliably install security daemons on a client's machine because the entire automation system didn't account for autoscaling. The issues were raised well before I joined and the project head legitimately didn't understand it as a problem that needed solving. The hosts were for a presidential candidate's webserver, and they noticed the webservers were missing security daemons days before the election.

aliqot 4y ago
jeez thats a rough spot to be in. did you stick around to fix it or just get the hell out of dodge after that?
- chaps 4y ago
  I did what I could with a handful of selenium scripts, then hit a road block because we didn't have ssh access to a chunk of the autoscaling hosts. Gave up after that, told the customer rep to tell them we can't do it, and gave my two week notice about a month later.
  - aliqot 4y ago
    Ouch, that has to be rough to endure. I'm glad you seem to be in a better place now. Good on you for doing the right thing and getting the hell out of there when your options ran out.
DiggyJohnson 4y ago
Maybe I'm missing a joke, but was your client HRC's campaign?(?!)
- aliqot 4y ago
  That's not important and this ain't the place to ask otherwise they'd have told us.
  - DiggyJohnson 4y ago
    > this ain't the place to ask Am I double-whooshing here? How is a Hacker News comment thread not the right place to respectfully ask questions in response to interesting comments. I know I'm not entitled to an answer, nor do I intend to start a flame war. Sheesh
    - aliqot 4y ago
      It is personal information that risks identifying them more than they already had at the time of posting. It took about two seconds to put everything together. I don't have a dog in this fight politically one way or the other, people don't need to identify themselves IRL here.
      - DiggyJohnson 4y ago
        Who are you to decide what others are comfortable sharing on here. It is quite literally as simple as the person I replied to choosing not reply to my comment. Why is this issue a concern to you? > I don't have a dog in this fight politically one way or the other Neither do I. > people don't need to identify themselves IRL here I don't think they do either. Why are you assuming I "needed" this information?
        chaps 4y ago
        Can you not? They're right.
        DiggyJohnson 4y ago
        Can I not what? Why won’t either of you respond to my core argument: GGP does not need to respond to my comment if they’re not comfortable. Me asking the question is not me demanding a response.
riffic 4y ago
are "security daemons" truly necessary though? this whole thing sounds like a troll with enough convincing language to seem plausible
- chaps 4y ago
  We could debate security daemons until our minds bleed, but.. man, I wish that all didn't happen.
- 77pt77 4y ago
  Without the security daemons you risk a flux capacitor overload and that leads to it being exploitable via pointer wraparound.
  - riffic 4y ago
    in that case I'll throw on my wraparound shades.. and deal with it
outworlder 4y ago
> security daemons AKA compliance checkbox crap? If infrastructure is immutable (which makes it work even better for autoscaling), nothing new will get installed unless you build a new image. Export whatever data you require to ensure things you want to be running are running. Monitor entry and exit points. What is left for the "security deamons" to do?

whats_a_quasar 4y ago

Huh? Are you assuming that the parent comment is about someone programming a medical device?

deleted 4y ago
[deleted]
lifeisstillgood 4y ago
I'm think it's a meta joke - Therac-25 (https://en.m.wikipedia.org/wiki/Therac-25 https://en.m.wikipedia.org/wiki/Therac-25) was a radiotherapy machine from the early 1980s and is (in)famous for having software failed and killed I think dozens of people. It's become a well known case study, but it's highly unlikely anyone on HN worked on it - I think that's the joke.