5 ms·

Also, maybe my time zones are wrong, but it seems like the engineer changed the bug status to "disclosed" late in the day Friday? A corollary: Don't do sh*t la

Also, maybe my time zones are wrong, but it seems like the engineer changed the bug status to "disclosed" late in the day Friday? A corollary: Don't do sh*t late Friday that will fester over the weekend. It makes me mental when people want to "close their week" by deploying a change to a public-facing system. Yes it feels great to check it off your list and start your weekend. But unless you're prepared to deal with it over the weekend -- and got buy-in from the rest of your team they're prepared to deal with it -- please don't.

nknighthb 13y ago
I haven't used hackerone myself, so this is just based on limited observation, but it looks to me like it was automatically disclosed one month after the reporter made the request. Otherwise, I believe it would have said something like "schofield agreed to make this public".
- michiel3 13y ago
  That is correct. The reporter requested public disclosure after the report was closed. The bug automatically gets disclosed publicly 30 days after the report is closed, unless the team requests more time by re-opening the bug. You can read more about the disclosure philosophy here: https://hackerone.com/guidelines https://hackerone.com/guidelines
  - 6cxs2hd6 13y ago
    Thanks for explaining that. So maybe a feature-request for hackerone would be, don't auto-disclose on Fridays; instead bump to Monday. :)
  - krunk4ever 13y ago
    Another interesting feature might be notifying the engineering team that a following list of bugs will be automatically disclosed in x days and give them a chance to review them with a fresh pair of eyes.
toomuchtodo 13y ago
I run ops at my current ship, and my counterpart is our lead developer. I'm not sure how it works elsewhere, but together we have a very strict "We DO NOT deploy production changes on Friday". New chef script? Monday. Change to how we're sending writes or reads to different DB clusters? Monday. I do not know why this isn't the norm in more places.
- toomuchtodo 13y ago
  s/ship/shop
  - lengads 13y ago
    I quite like the idea of calling one's workplace a ship. I'll take that expression on board, sea if it floats.
    - lloyddobbler 13y ago
      Definitely. Ship that shit.
__david__ 13y ago
> It makes me mental when people want to "close their week" by deploying a change to a public-facing system. Yes it feels great to check it off your list and start your weekend. But unless you're prepared to deal with it over the weekend -- and got buy-in from the rest of your team they're prepared to deal with it -- please don't. My favorite is the deploy right before the vacation. The internal pressure is even higher in that case (the dev doesn't want anything on their mind during their vacation—totally understandable), but the outcome/cleanup is even worse—they're not there to fix their code (and possibly not even available since they might be on a plane).

nknighthb 13y ago

I haven't used hackerone myself, so this is just based on limited observation, but it looks to me like it was automatically disclosed one month after the reporter made the request. Otherwise, I believe it would have said something like "schofield agreed to make this public".

michiel3 13y ago
That is correct. The reporter requested public disclosure after the report was closed. The bug automatically gets disclosed publicly 30 days after the report is closed, unless the team requests more time by re-opening the bug. You can read more about the disclosure philosophy here: https://hackerone.com/guidelines https://hackerone.com/guidelines
- 6cxs2hd6 13y ago
  Thanks for explaining that. So maybe a feature-request for hackerone would be, don't auto-disclose on Fridays; instead bump to Monday. :)
- krunk4ever 13y ago
  Another interesting feature might be notifying the engineering team that a following list of bugs will be automatically disclosed in x days and give them a chance to review them with a fresh pair of eyes.

toomuchtodo 13y ago

I run ops at my current ship, and my counterpart is our lead developer. I'm not sure how it works elsewhere, but together we have a very strict "We DO NOT deploy production changes on Friday". New chef script? Monday. Change to how we're sending writes or reads to different DB clusters? Monday. I do not know why this isn't the norm in more places.

toomuchtodo 13y ago
s/ship/shop
- lengads 13y ago
  I quite like the idea of calling one's workplace a ship. I'll take that expression on board, sea if it floats.
  - lloyddobbler 13y ago
    Definitely. Ship that shit.

__david__ 13y ago

> It makes me mental when people want to "close their week" by deploying a change to a public-facing system. Yes it feels great to check it off your list and start your weekend. But unless you're prepared to deal with it over the weekend -- and got buy-in from the rest of your team they're prepared to deal with it -- please don't. My favorite is the deploy right before the vacation. The internal pressure is even higher in that case (the dev doesn't want anything on their mind during their vacation—totally understandable), but the outcome/cleanup is even worse—they're not there to fix their code (and possibly not even available since they might be on a plane).