2 ms·

As I said: It's not just another security bug. It's an easy to spot bug, in the most critical part of the code, of a fundamental security library. THIS is what

by ambrop7 13y ago

As I said: It's not just another security bug. It's an easy to spot bug, in the most critical part of the code, of a fundamental security library. THIS is what makes it unacceptable. It pretty much means the change has never gone through code review, or has been planted.

res0nat0r 13y ago
While working at AWS and seeing outages being posted here, and the wildly inaccurate summaries (guesses) of what the problems were, and the wildly simplistic fixes that are assumed to easily be put in place I can say: systems like this are more complicated than you think they are.
- renaudg 13y ago
  A huge +1 to this, from someone who worked at Facebook.
- nicholassmith 13y ago
  Agreed, everyone enjoys playing armchair critic and in the majority of the time have no idea how the internal systems are structured or managed.
sbuk 13y ago
> “It pretty much means that the change has never gone through code review, or has been planted.” Or Hanlon's Razor; “Never attribute to malice that which is adequately explained by stupidity.” Going straight to dumb-ass conspiracy theories it what is unacceptable.
- ambrop7 13y ago
  Hence the "or". In this case, stupidity is equally unacceptable.
  - sbuk 13y ago
    No. To err is human. In the grand scheme of things, it's a PR fuck up; nothing more. I doubt it affects you directly enough as a Gentoo user to have such a strong reaction anyway, but if it make you feel superior, then all power to you. Lighten up and have a look at this and ask your self if you have honestly never done the same thing: http://xkcd.com/292/ http://xkcd.com/292/ if you think you haven't, I can gaur tee that you are deluding yourself...
    - sneak 13y ago
      The error is not that of the programmer's. The fault is not in code, it's in processes that were chosen by management. Indeed, to err is human. This is why you're a negligent jackass if you don't plan for errors and build multiple systems to prevent and detect them, at least until computers start programming themselves for us.

by ambrop7 13y ago

res0nat0r 13y ago

While working at AWS and seeing outages being posted here, and the wildly inaccurate summaries (guesses) of what the problems were, and the wildly simplistic fixes that are assumed to easily be put in place I can say: systems like this are more complicated than you think they are.

renaudg 13y ago
A huge +1 to this, from someone who worked at Facebook.
nicholassmith 13y ago
Agreed, everyone enjoys playing armchair critic and in the majority of the time have no idea how the internal systems are structured or managed.

sbuk 13y ago

> “It pretty much means that the change has never gone through code review, or has been planted.” Or Hanlon's Razor; “Never attribute to malice that which is adequately explained by stupidity.” Going straight to dumb-ass conspiracy theories it what is unacceptable.

ambrop7 13y ago
Hence the "or". In this case, stupidity is equally unacceptable.
- sbuk 13y ago
  No. To err is human. In the grand scheme of things, it's a PR fuck up; nothing more. I doubt it affects you directly enough as a Gentoo user to have such a strong reaction anyway, but if it make you feel superior, then all power to you. Lighten up and have a look at this and ask your self if you have honestly never done the same thing: http://xkcd.com/292/ http://xkcd.com/292/ if you think you haven't, I can gaur tee that you are deluding yourself...
  - sneak 13y ago
    The error is not that of the programmer's. The fault is not in code, it's in processes that were chosen by management. Indeed, to err is human. This is why you're a negligent jackass if you don't plan for errors and build multiple systems to prevent and detect them, at least until computers start programming themselves for us.