Live data from Hacker News

Amazon Lumberyard: A Scream of Anguish

viva64.com

31–40 of 58 posts

Re: Amazon Lumberyard: A Scream of Anguish

#31
post #23

Earlier quoted context omitted.

> That's Russia for you. Yes, it could not happen elsewhere, e.g: https://www.xdesk.com/wirecutter-standing-desk-review-pay-to... (And from a NYT backed website, nonetheless) > That's ANY shady son of a bitch for you, really. Better.

REALLY disappointed to read this about The Wirecutter.

Yeah, me too. Thought they were a legit site, and always checked them for 3-4 things I've bought they cover. Now I see them as any other site, to be read with a grain of salt.

Re: Amazon Lumberyard: A Scream of Anguish

#32

The posts from these guys are pure BLACKMAIL. I work at one of the companies who's product they "reviewed" and many of us got unsolicited emails basically saying, we found all these bugs using our code analyzer. Buy a license from us to fix them or we will post a negative review of your code. It's a horrible business practice and they do that with many open source products. This behavior shouldn't be praised.

No, that's not blackmail. You can only blackmail through exclusive knowledge. If they tested your code, then I'll assume your code is out there in the open, so anyone can run your code through a static analyzer and write a blog post about it.

Yes, these posts are advertisements for PVS-Studio, and since they frequently land on HN, they obviously work for them. Besides, you don't even have to buy PVS-Studio, since the Demo already will show you the complete analyzer output, you just won't be able to directly jump to the source.

Re: Amazon Lumberyard: A Scream of Anguish

#33
post #23

Earlier quoted context omitted.

> That's Russia for you. Yes, it could not happen elsewhere, e.g: https://www.xdesk.com/wirecutter-standing-desk-review-pay-to... (And from a NYT backed website, nonetheless) > That's ANY shady son of a bitch for you, really. Better.

REALLY disappointed to read this about The Wirecutter.

From context, Lams use of “kickbacks” in the email refers to Amazon affiliate payments. It’s a freakishly poor choice of words but hardly scandalous.

Re: Amazon Lumberyard: A Scream of Anguish

#34

One thing that puzzles is me is why some of these checks aren't just part of the warnings that a compiler emits. I get that you wouldn't want to enable them all the time, but usually comparing a variable to itself is not what you want.

You're right, but just a fun edge-case to think about (in JS): NaN === NaN // -> false This check is sometimes used to check if a number is NaN.

Sure, and there are cases where you may been reading from some volatile register or something. But that's why I mentioned that this is usually what you want, not always :)

Re: Amazon Lumberyard: A Scream of Anguish

#35
post #26

Easy to pick on an open source project, suggest changes, but not actually make them on your OWN fork? Clickbait, gross. Similar to linting, where often I need variation in rules, sometimes there's red herrings even in static code analysis. Game software in general can be fly-by-the-wind because it's real-world software ... of course this is all me reacting and trying to argue with the clickbait :/

> not actually make them on your OWN fork? Clickbait, gross.

Yup. Something like :

> You have bugs in your codebase of 1M+ line, you want to fix them ? Buy my proprietary software for 30$/Month per user , which was built 100% on open source tech obviously.

Getting traffic using linting issues from a large codebase to promote a proprietary software , Outrageous.

Re: Amazon Lumberyard: A Scream of Anguish

#36
post #7

Why would anyone choose Lumberyard over CryEngine directly? I would think that ones core product will always be better maintained then just some side project that was bought in.

Crytek recently (and it may still be going on) sued Cloud Imperium Games (CIG, the people behind StarCitizen) for switching from Cryengine to Lumberyard.

The details are few and far between, but the possibility or being sued by the vendor would be a bit off putting for me.

Re: Amazon Lumberyard: A Scream of Anguish

#37
tl;dr:

Ran static analysis tool author is trying to sell on a 1 million+ line code base for Amazon's open source game engine Lumberyard.

Found warnings. Used it to infer quality of the product and wrote a very click-bait title.

Re: Amazon Lumberyard: A Scream of Anguish

#38

The posts from these guys are pure BLACKMAIL. I work at one of the companies who's product they "reviewed" and many of us got unsolicited emails basically saying, we found all these bugs using our code analyzer. Buy a license from us to fix them or we will post a negative review of your code. It's a horrible business practice and they do that with many open source products. This behavior shouldn't be praised.

Maybe something got lost in translation? "Fix the bugs or we will publish" seems to be standard operating procedure for security researchers who randomly find a vulnerability. Maybe they just wanted to tell you that you'd be able to use their tool to fix those bugs more easily.

Re: Amazon Lumberyard: A Scream of Anguish

#40
post #22
post #16

Earlier quoted context omitted.

gcc and clang have been getting better at this recently. For instance if you do an "x == x" comparison for an int x clang will warn "warning: self-comparison always evaluates to true [-Wtautological-compare]". I completely agree that having these warnings in the compiler is much better than a standalone analysis tool, because they're less likely to be ignored. But I think it may have been a bit of a shift of mindset…

Lint exists since 1979. Everything that is outsourced for an external tool, just happens not to be used by the majority. Clearly the introduction of clang and its sanitizers has changed a bit the mindset, however they are still used by a minority. As per CppCon 2016, 1% of the audience confirmed they were using some kind of validation tool.

I agree, but my sense is that the number of people and projects willing to fix complaints reported by compiler warnings is larger than the number of people who care enough to run a separate tool over their codebase. This is purely a UI thing -- if the compiler had a -Wlint option that ran lint and integrated its reports into its own warning output it would probably have a similar effect, especially if enabled by default...
Post reply on HN