Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

GitHub is apparently in crisis again

businessinsider.com

Post reply on HN
Print view View original

51–60 of 159 posts

Re: GitHub is apparently in crisis again

#51

Post by sarciszewski »

sytse wrote: post #48
sarciszewski wrote: post #44

Earlier quoted context omitted.

> Why do you feel you would need to review the entire codebase to deploy Gitlab? I already answered this. Quoting my post above: > so I can deploy it with confidence Emphasis is important. Background: I do application security consulting. Do you expect me to trust the code that other developers write without verifying that it's not a pile of lacey Swiss first? Also, if I do find any bugs, I'll report them upstream (s…

We welcome all the paranoia we can get. Please be informed that multiple organizations have done security audits for GitLab and we have paid external parties to perform them for us. That doesn't mean there are no bugs anymore.

Multiple organizations -> good! :)

Not to speak badly about any of my peers in particular, but I've come in after other security auditing teams and found really obvious bugs that they've overlooked.

Though I usually give them the benefit of the doubt and omit my feelings when I write my report. Maybe it was a time constraint or a scoping issue that prevented them from seeing it? I have no way of knowing.

So, kudos for not having a single point of failure.

Re: GitHub is apparently in crisis again

#52

Post by shampine »

sarciszewski wrote: post #44
shampine wrote: post #39

Earlier quoted context omitted.

Why do you feel you would need to review the entire codebase to deploy Gitlab? It is an apt-get installation now that they ported to Omnibus. The days of debugging gem errors on compile and migrating by hand are over.

> Why do you feel you would need to review the entire codebase to deploy Gitlab? I already answered this. Quoting my post above: > so I can deploy it with confidence Emphasis is important. Background: I do application security consulting. Do you expect me to trust the code that other developers write without verifying that it's not a pile of lacey Swiss first? Also, if I do find any bugs, I'll report them upstream (s…

Adding emphasis to an empty word doesn't give it meaning. You answered my question but first you prefaced with asking me why I can't read your mind.

Re: GitHub is apparently in crisis again

#53

Post by sarciszewski »

shampine wrote: post #52
sarciszewski wrote: post #44

Earlier quoted context omitted.

> Why do you feel you would need to review the entire codebase to deploy Gitlab? I already answered this. Quoting my post above: > so I can deploy it with confidence Emphasis is important. Background: I do application security consulting. Do you expect me to trust the code that other developers write without verifying that it's not a pile of lacey Swiss first? Also, if I do find any bugs, I'll report them upstream (s…

Adding emphasis to an empty word doesn't give it meaning. You answered my question but first you prefaced with asking me why I can't read your mind.

> Adding emphasis to an empty word doesn't give it meaning.

It's not an empty word, it's a very important semantic detail about what I was actually saying. It was chosen specifically and purposefully to transmit that information. If you dismissed it as "an empty word", then the fault of this miscommunication is on your end.

> You answered my question but first you prefaced with asking me why I can't read your mind.

You chose to discard the information I already provided. You don't need to read my mind when every clue you need to piece together the intended meaning is written on the screen in front of you. (Or, if you're blind, maybe you experienced it as an audio stream?)

Re: GitHub is apparently in crisis again

#54

Post by rcarrigan87 »

PhilWright wrote: post #4

I don't understand why this is an issue for the current employees. Surely you hire a bunch of sales people and a bunch of consultants to help with on-boarding/support and place them in a separate floor or building. They don't really need to interact with developers. The 'brogrammers' just carry on as normal and some of their work is now adding features to help support enterprise requirements. Unless your sitting a co…

Why do the sales people need to be on a different floor?

Re: GitHub is apparently in crisis again

#55

Post by mmel »

PhilWright wrote: post #4

I don't understand why this is an issue for the current employees. Surely you hire a bunch of sales people and a bunch of consultants to help with on-boarding/support and place them in a separate floor or building. They don't really need to interact with developers. The 'brogrammers' just carry on as normal and some of their work is now adding features to help support enterprise requirements. Unless your sitting a co…

Why did you use the word 'brogrammers' instead of programmers?

Re: GitHub is apparently in crisis again

#56

Post by siegecraft »

Github feels like a services company, not software. Maybe they always have been. But that means they may lack the talent to deliver enterprise-level features. Their API and extremely coarse permission don't even let you build your own. If that's your problem then it makes sense to bring in a new VP of Engineering. But the new CEO certainly hasn't done anything to inspire confidence since he took over.

Re: GitHub is apparently in crisis again

#57

Post by [deleted] »

sarciszewski wrote: post #53
shampine wrote: post #52

Earlier quoted context omitted.

Adding emphasis to an empty word doesn't give it meaning. You answered my question but first you prefaced with asking me why I can't read your mind.

> Adding emphasis to an empty word doesn't give it meaning. It's not an empty word, it's a very important semantic detail about what I was actually saying. It was chosen specifically and purposefully to transmit that information. If you dismissed it as "an empty word", then the fault of this miscommunication is on your end. > You answered my question but first you prefaced with asking me why I can't read your mind. Y…

[deleted]

Re: GitHub is apparently in crisis again

#58

Post by shampine »

sarciszewski wrote: post #53
shampine wrote: post #52

Earlier quoted context omitted.

Adding emphasis to an empty word doesn't give it meaning. You answered my question but first you prefaced with asking me why I can't read your mind.

> Adding emphasis to an empty word doesn't give it meaning. It's not an empty word, it's a very important semantic detail about what I was actually saying. It was chosen specifically and purposefully to transmit that information. If you dismissed it as "an empty word", then the fault of this miscommunication is on your end. > You answered my question but first you prefaced with asking me why I can't read your mind. Y…

Simply put, you could have just answered the question. I wouldn't have asked it if you were clear about your meaning.

Re: GitHub is apparently in crisis again

#59

Post by sarciszewski »

shampine wrote: post #58
sarciszewski wrote: post #53

Earlier quoted context omitted.

> Adding emphasis to an empty word doesn't give it meaning. It's not an empty word, it's a very important semantic detail about what I was actually saying. It was chosen specifically and purposefully to transmit that information. If you dismissed it as "an empty word", then the fault of this miscommunication is on your end. > You answered my question but first you prefaced with asking me why I can't read your mind. Y…

Simply put, you could have just answered the question. I wouldn't have asked it if you were clear about your meaning.

Sorry, I don't know how to be clear to people whom treat the very important phrase "with confidence" as nonexistent in that sentence.

Maybe this app will help?

https://play.google.com/store/apps/details?id=com.interactiv...

Re: GitHub is apparently in crisis again

#60

Post by baudehlo »

erinjerri16 wrote: post #18

Hm, who actually uses GitLab or Atlassian? Who else is getting lots of users en masse at this level that they become dependent on the software, if GH goes down, there goes a ton of open source and indie devs who depend on it. Re: enterprise sales, well that's startup life for you. Re: hiring & sales - on a semi tangential noet Honestly, when I visited GH last year and met the very (few) women that worked there (they…

Bitbucket is generally used for two reasons:

1: better Jira integration 2: no limit on number of projects

The second reason makes it very popular among small design/dev shops.

Post reply on HN