3 ms·

How are they supposed to discover every new binary for every application as soon as it is released, correctly classify them as known good, and add them to the Q

by efitz 3y ago

How are they supposed to discover every new binary for every application as soon as it is released, correctly classify them as known good, and add them to the QA testing, in a time frame that you would not classify as “incompetence”? If it’s so easy that only incompetence or malice could explain it, why don’t you go work for them and fix it? I’m sure that people who have spent decades in the field would appreciate your wisdom.

Karunamon 3y ago
It is the Tor Browser. From the official project. It lives at https://www.torproject.org/download/ https://www.torproject.org/download/ - Literally the first thing you get directed to if you go to a search engine and enter something like "download tor". This fruit could only be lower-hanging if it shipped with Windows. If they can't be bothered to look for the single most obvious non-malicious use of the thing they are trying to detect, it says very concerning things. Things like "we beta test our file removal tool in production", except "production" is "millions of unwitting people's PCs" rather than some website.
- charcircuit 3y ago
  It didn't flag older versions of the browser.
  - pseg134 3y ago
    Practically everyone who uses Tor will be running the latest browser for security reasons so they didn’t test the only one that matters.
    - tmpX7dMeXU 3y ago
      I think that you are missing something here about how the passage of time works, be used you’re dead set on pinning gross incompetence on Microsoft.
belorn 3y ago
Windows collect a lot on users and what users commonly install on their machines. For this specific situation a simple script pulling from chocolatey and a warning based on a threshold (and additional warning factors based on history) would have given them a failing test for fairly low amount of effort. This kind of issue should be mostly automated rather than being manually added by QA.
- insanitybit 3y ago
  This is hilarious beyond the classic "Dropbox is just NFS" post. You have zero idea what you're talking about.
salawat 3y ago
>If it’s so easy that only incompetence or malice could explain it, why don’t you go work for them and fix it? I’m sure that people who have spent decades in the field would appreciate your wisdom. Not that poster, but I'll answer your question and challenge happily. >why don’t you go work for them and fix it? Because it wouldn't be mine and would never be in any way, and I don't trust those businesses and the executives that end up running them, either as responsible stewards, or fundamentally speaking based on their incentive structure. >I’m sure that people who have spent decades in the field would appreciate your wisdom. You mean corporations/orgs, or actually people? The people almost universally do. The corps/orgs on the other hand have liberally demonstrated their appreciation by acquiring the largest shared repositories of code and craftsmanship humanity has hitherto generated, and used that corpus in order to do everything possible to decrease their reliance on hiring people they might have to actually pay, or who might tell them no when they demand someone build something unethical. So again, comes down to trust. Pretty sure you were setting up a sarcasm burn, but I figured I'd take you at face value, and threw in rendering the elephant in the room. I know. I'm spouting anathema to the business peeps in the room, but I'm pretty sure the makers in the room know where I'm coming from.
- tmpX7dMeXU 3y ago
  You are doing yourself a great disservice by drawing such strict distinctions between certain groups of people. Business people? Makers? I guarantee you that there are better “makers” than you that also at the very least have an MBA and practice that skill set daily. Your attitude points to you being, frankly, incredibly adversarial in nature, fed by what seems to me like a completely unjustified superiority complex.

by efitz 3y ago

Karunamon 3y ago

It is the Tor Browser. From the official project. It lives at https://www.torproject.org/download/ https://www.torproject.org/download/ - Literally the first thing you get directed to if you go to a search engine and enter something like "download tor". This fruit could only be lower-hanging if it shipped with Windows. If they can't be bothered to look for the single most obvious non-malicious use of the thing they are trying to detect, it says very concerning things. Things like "we beta test our file removal tool in production", except "production" is "millions of unwitting people's PCs" rather than some website.

charcircuit 3y ago
It didn't flag older versions of the browser.
- pseg134 3y ago
  Practically everyone who uses Tor will be running the latest browser for security reasons so they didn’t test the only one that matters.
  - tmpX7dMeXU 3y ago
    I think that you are missing something here about how the passage of time works, be used you’re dead set on pinning gross incompetence on Microsoft.

belorn 3y ago

Windows collect a lot on users and what users commonly install on their machines. For this specific situation a simple script pulling from chocolatey and a warning based on a threshold (and additional warning factors based on history) would have given them a failing test for fairly low amount of effort. This kind of issue should be mostly automated rather than being manually added by QA.

insanitybit 3y ago
This is hilarious beyond the classic "Dropbox is just NFS" post. You have zero idea what you're talking about.

salawat 3y ago

>If it’s so easy that only incompetence or malice could explain it, why don’t you go work for them and fix it? I’m sure that people who have spent decades in the field would appreciate your wisdom. Not that poster, but I'll answer your question and challenge happily. >why don’t you go work for them and fix it? Because it wouldn't be mine and would never be in any way, and I don't trust those businesses and the executives that end up running them, either as responsible stewards, or fundamentally speaking based on their incentive structure. >I’m sure that people who have spent decades in the field would appreciate your wisdom. You mean corporations/orgs, or actually people? The people almost universally do. The corps/orgs on the other hand have liberally demonstrated their appreciation by acquiring the largest shared repositories of code and craftsmanship humanity has hitherto generated, and used that corpus in order to do everything possible to decrease their reliance on hiring people they might have to actually pay, or who might tell them no when they demand someone build something unethical. So again, comes down to trust. Pretty sure you were setting up a sarcasm burn, but I figured I'd take you at face value, and threw in rendering the elephant in the room. I know. I'm spouting anathema to the business peeps in the room, but I'm pretty sure the makers in the room know where I'm coming from.

tmpX7dMeXU 3y ago
You are doing yourself a great disservice by drawing such strict distinctions between certain groups of people. Business people? Makers? I guarantee you that there are better “makers” than you that also at the very least have an MBA and practice that skill set daily. Your attitude points to you being, frankly, incredibly adversarial in nature, fed by what seems to me like a completely unjustified superiority complex.