Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Do they not roll out their new agents in small increments?

I'm trying to understand how there is such a serious issue at this scale.



The answer is clearly no.

I genuinely wonder if this is going to result in actual legislation that makes gradual rollouts mandatory for all software.

Because if a developer mistake can hobble critical systems like this, it seems like the risks to safety and national security are too great to leave the decision of instant vs. gradual rollouts for companies to decide themselves.

Of course, the twist here is that it was seemingly a kind of routine configuration file that triggered a pre-existing bug in the software. And gradual rollout of config files quite often seems like overkill. I mean, do you need a gradual rollout of a new spellcheck dictionary? Of new screensaver videos?

And if it's configuration information containing new computer virus or malware signatures, that seems like precisely the kind of thing that you might want to get out to everyone simultaneously, not rolled out over the course of days. And yet, because of antivirus/security software's elevated privileges, it's also ironically where a mistake can do the most damage.


> And gradual rollout of config files quite often seems like overkill.

Indeed, but it is still mandated at large companies (e.g. Google) because of exactly this scenario.


Nah, they just need to install the agent on each engineer's computer from DevSafe.


It's not a serious issue, as you see they clearly have all the fancy bling bling logos on their site. Processes were followed. ISO standard numbers were chanted. It's a completely isolated _accident_ there's no scale at all here, and they could have done nothing to prevent it, duh. And going forward they will hire a Chief This Never Happens Again Officer and everything will continue to be good.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: