4 ms·
(you appear to have triggered some downvote fairies by having a differing opinion, have an up to compensate a little! I disagree too as documented below but unl
by dspillett 4y ago
(you appear to have triggered some downvote fairies by having a differing opinion, have an up to compensate a little! I disagree too as documented below but unless something truly offensive is said I'm of the option that downvoting is generally a bad response)
> you could say servers should be airgapped because security is hard
Many effectively do, and I wish more would do, as a default starting point. Maybe not physically air-gapped but firewall all incoming and outgoing then selectively allow packets through as specifically needed.
Translating to timezones: default to UTC and configure hosted software to display local timezones as needed. Only have the system in a different TZ if something won't work properly otherwise (including it can't be configured to display in something other than the system TZ) or is date sensitive and buggy in a way that it gets confused about yesterday/today/tomorrow when local midnight and UTC midnight differ.
Also if considering resources used by people in multiple timezones, you have to pick something and translate for others, you might as well pick UTC as some things assume it.
> Or that you should only type ASCII because Unicode is hard.
Again yes, by default, and always for things like hostnames, and adjust at needed or when you know Unicode is supported end-to-end (or that where it isn't, something just looks wrong and firefighting that is preferable to not sticking to ASCII in the first place). Though it helps from my point of view that the most obvious omission from ASCII in my locale is our currency symbol.
I say the same for spaces in filenames too: while you perhaps shouldn't have to avoid them, in practise you are setting yourself up for potential trouble later if you don't.
> EDIT: I'm just saying that you can't blame the user for using the features that come with the system.
I agree completely.
But, for instance, while I won't victim blame when someone accidentally leaves doors unlocked and has things stolen, I do make an effort to be damn sure my doors and windows are secure and recommend others do too. There is a difference between victim blaming and recommending preventative defaults because you know there is shit code it there.