11 ms·
If the CTO builds an engineering team that lacks the expertise to write a regex that matches the company's own name, and builds a culture of security and qualit
by williamsmj 2y ago
If the CTO builds an engineering team that lacks the expertise to write a regex that matches the company's own name, and builds a culture of security and quality process that failed to catch this before shipping to production, then the CTO should be fired for cause.
Unfortunately the CTO also owns the company.
- mise_en_place 2y agoI wouldn’t go that far but there is a teachable moment here. It goes to show how little engineers actually read PRs/MRs these days…it’s just become a rubber stamp at this point. This is not a problem specific to X, I’d wager a lot on that. It’s a widespread cultural problem in our industry. Remember XZ?
- iainmerrick 2y agoHow is that connected at all to the Twitter fiasco? One is a very sophisticated backdoor attempt in an open source library, the other is an utterly boneheaded and simplistic mis-feature in a closed source platform. They could hardly be more different.