4 ms·
See, this is why I retired early from software engineering
- consumer451 3y agoI can understand the thrust of this, but the problem in xz backdoor was not a product of move fast and break things.. it was a product of the implied web of trust in OSS, wasn't it? https://xkcd.com/2347/ https://xkcd.com/2347/ https://news.ycombinator.com/item?id=39874942 https://news.ycombinator.com/item?id=39874942
- humanrebar 3y agoThe argument is that various steps in the backdoor relied on hacks and tech debt in autotools that are taken as arcane but normal, like detecting whether certain dependencies exist by trying to compile snippets of code. Instead of, you know, just having build systems, dependency management, and such.
- deleted 3y ago[deleted]
- avmich 3y agoThis one is interesting - > Devon: Fred made a whole set of structs containing raw untyped pointers so he could reinvent polymorphism in C, because he "doesn't like C++". The refrain is "Autotools.Must.Die", but somehow the complexities of C++ don't come into focus. That is, I pause when I think about a large project written in C++. Yes, it's a bad idea to reinvent polymorphism in C, but C++...
- deleted 3y ago[deleted]
- chris_wot 3y agoIt’s not necessarily easy to move a significant project to another build system.