• 0 Posts
  • 53 Comments
Joined 1 year ago
cake
Cake day: August 6th, 2023

help-circle





  • Who tests the useless survey? Everyone with regression tests. Like dude, everything you talk about has been written “in blood” from years of hosting production systems. If the useless survey is needed, then write a test for it, or a testcase to manually try it. Don’t just upgrade, see that the app is up and push to prod, that’s not testing, that’s asking for trouble.


  • Okay, let’s be angry at the company and frown a lot at what happened. Gurr, bad company, evil.

    And now think of what you’d rather have - a working system, or a reason to be angry? If you have something that integrated with something else, lock it down at a specific version so you control the upgrade and know those versions work 100% of the time together. “Latest” is just asking for trouble - be it in a docker image, in dependencies or elsewhere. It’s absolutely not a “best practice” if it isn’t even a code smell or an outright bug. You could’ve had a slightly outdated version, which won’t be “exploitable” - you wouldn’t have enough time to exploit anything in that time, especially with smaller companies and obscure exploits.

    Instead of putting out the fire, you could’ve been now looking into the upgrade, seeing on UAT or Test or whatever that forms aren’t supported, chilling till they are supported or complaining that they aren’t.

    Upgrades breaking shit is like programming / devops 101, and a huge reason for technical debt in very old projects. Leaving all that to chance is just irressponsible.













  • Maalus@lemmy.worldtoMildly Infuriating@lemmy.world*Permanently Deleted*
    link
    fedilink
    English
    arrow-up
    9
    arrow-down
    1
    ·
    9 months ago

    Blame whoever you want. In reality they teach you not to be a hero. Security is there for that. They are the people responsible. If they ask you to do something, do it. If they don’t, then don’t try anything that may make the situation worse.

    Product is replaceable and insured. Your life, or the life of anyone else there isn’t. The fact is that it most likely impacted other people working there since “manager got punched in the face, I don’t feel safe here anymore” is a reasonable reaction.

    He probably shouldn’t have gotten fired for it, but still - OP isn’t entirely blameless.