4 ms·
> I would use an open source db for payments The idea that you're using something for mission-critical things and can't even look at the source code seems terr
by otabdeveloper4 3y ago
> I would use an open source db for payments
The idea that you're using something for mission-critical things and can't even look at the source code seems terrifying and absolutely nuts to me.
- tatersolid 3y agoUEFI, CPU microcode, SSD firmware, TPM/HSM code… you lost the “everything critical must be open source” battle when you bought/rented your server.
- comex 3y ago(Not the OP.) “Terrifying and absolutely nuts” may be over the top, but in my experience it can be extremely helpful to have the source code to as many components as possible when something goes wrong. Sometimes you find a bug in one of those components. Sometimes the bug turns out to be in your own code, but attaching a debugger to one of those components is still the quickest way to track it down (e.g. by letting you determine what exactly is triggering some vague error message). So all else being equal, I find it a lot easier to trust open-source code.
- otabdeveloper4 3y agoYes, and I still stand by my "terrifying and absolutely nuts" opinion. Also, there is a huge difference of category here - the things you listed are interchangeable commodities. You can always use some other storage mechanism instead of a misbehaving SSD. Software like Oracle or Db2 aren't, once you're locked into them, you can't leave.