3 ms·
I work in internal tools development, aka platform engineering, and this is interesting: > That's part of the problem. But companies also are unwilling to pay
by oooyay 2y ago
I work in internal tools development, aka platform engineering, and this is interesting:
> That's part of the problem. But companies also are unwilling to pay to do any of the things that you've described. There is no punishment or fine that is actually punitive. Protecting (short term) profit is more important than protecting users' data --- it's even more important than protecting the (long term) profit potential of a company with a good reputation.
Frankly, any company that says they're a technology or software business should be building these kinds of systems. They can grab FOSS implementations and build on top or hire people who build these kinds of systems from the ground up. There's plenty of people in platform engineering in the US who could use those jobs. There's zero excuse other than that they don't want to spend the money to protect their customers data.
- stackskipton 2y agoThis is not a tools problem, this is incentive and political problem. Telecoms will not get fined for this breach, or fined at amount that is meaningful, so they are not going to care.
- oooyay 2y agoI'm not sure why it's either/or to you. Seems to me like we're talking about the same problem but stated from two different perspectives. Politics has historically incentivized job creation.
- stackskipton 2y agoBecause you came in acting like Internal Developer Platform would be fix to their problems when it won't be. In fact, I doubt the lack of IDP is their problem. As SRE, I'm just over everyone running around acting like another tool is going to solve the problem. It's not, incentives need to be present not to be completely terrible at their job. Also, I guess I should admit, I have strong aversion to IDPs. They always become some grue that eats me.
- oooyay 2y agoAn IDP is not a secrets management tool or vice versa. IDPs are more like connectors of your internal tools/platforms. Their key metrics have more to do with toil reduction and velocity, but they can certainly solve the kinds of problems that lead to a company thinking they need a group of people focusing solely on reliability. > Also, I guess I should admit, I have strong aversion to IDPs. They always become some grue that eats me. I am a SRE. I stopped using that title professionally some time ago and started focusing on what makes companies reach for SRE when the skillset is the same as a platform engineer. A post I wrote on the subject: https://ooo-yay.com/blog/posts/2024/you-probably-dont-need-sre https://ooo-yay.com/blog/posts/2024/you-probably-dont-need-s...