3 ms·

The rationale behind App Engine is very valid, though. You are one person, or perhaps a small company focused on developing particular software. Can you do as g

by jfoster 11y ago

The rationale behind App Engine is very valid, though. You are one person, or perhaps a small company focused on developing particular software. Can you do as good a job as Google's App Engine's security team at keeping your servers securely running your application? That includes potentially urgent patches to the kernel, libraries, web server, etc. Even if you can match Google's efforts in doing all that, why would you want to waste your time doing that maintenance work rather than working on your application itself? Docker VMs are an appealing concept to me, but it occurs to me that I would be dependent upon some third-party that I know very little about to release an updated image whenever something in the stack needs to be updated. Additionally, I need to be involved in that deployment. With App Engine, Google have my code, so they update the image and my code is always running in a VM that ought to be far more bullet-proof than I could manage. (even with some Linux knowledge)

chii 11y ago
> That includes potentially urgent patches to the kernel, libraries, web server, etc. but given that java 7 is getting EOL'ed, there will be no more security patches for it. So how do you expect their jvm is secure? The basis for google's ability to patch better than yourself is pure faith.
- jfoster 11y ago
  Google's execution of App Engine has been sloppy and half-hearted, but the concept makes sense, doesn't it? That said, I'm assuming their JVM is still secure despite being old. Oracle are EOLing their Java 7 JVM, but that doesn't directly affect App Engine unless that's the JVM Google are using. The indirect effects are inexcusable, though. That developers need to stick to an old language to use App Engine while the rest of the world has moved on is ridiculous.
lmm 11y ago
The rationale is very valid, but the experience with Heroku is just so much better.

by jfoster 11y ago

chii 11y ago

> That includes potentially urgent patches to the kernel, libraries, web server, etc. but given that java 7 is getting EOL'ed, there will be no more security patches for it. So how do you expect their jvm is secure? The basis for google's ability to patch better than yourself is pure faith.

jfoster 11y ago
Google's execution of App Engine has been sloppy and half-hearted, but the concept makes sense, doesn't it? That said, I'm assuming their JVM is still secure despite being old. Oracle are EOLing their Java 7 JVM, but that doesn't directly affect App Engine unless that's the JVM Google are using. The indirect effects are inexcusable, though. That developers need to stick to an old language to use App Engine while the rest of the world has moved on is ridiculous.

lmm 11y ago

The rationale is very valid, but the experience with Heroku is just so much better.