Update on 1/28 service outage • Hacker News Board

Re: Update on 1/28 service outage

#181

Post by semi-extrinsic » Fri, Jan 29, 2016, 10:07 PM UTC

nickpsecurity wrote: post #173

semi-extrinsic wrote: post #161

Earlier quoted context omitted.

The good reverend Laphroaig preaches: If the 0day in your familiar pastures dwindles, despair not! Rather, bestir yourself to where programmers are led astray from the sacred Assembly, neither understanding what their programming languages compile to, nor asking to see how their data is stored or transmitted in the true bits of the wire. For those who follow their computation through the layers shall gain 0day and pw…

An assembler elitist with a semi-fallacious argument. Let's rewrite that in view of a lower-level elitist to show it still looks true, shows love for assembler as foolish pride, and still fails to matter in face of good, high-level tools. If the 0day in your familiar pastures dwindles, despair not! Rather, bestir yourself to where programmers are led astray from the sacred RTL/Transistor language , neither understand…

I surmise the good reverend elevates Assembly not because it is fundamental, but because it is a level deeper than the domain of coders who yield unto us exploitable codes. Verily, I demand of ye, produceth thou the exploit of an Assembly 0day that was wrought from Transistor language!

Re: Update on 1/28 service outage

#182

Post by nickpsecurity » Fri, Jan 29, 2016, 10:46 PM UTC

semi-extrinsic wrote: post #181

nickpsecurity wrote: post #173

Earlier quoted context omitted.

An assembler elitist with a semi-fallacious argument. Let's rewrite that in view of a lower-level elitist to show it still looks true, shows love for assembler as foolish pride, and still fails to matter in face of good, high-level tools. If the 0day in your familiar pastures dwindles, despair not! Rather, bestir yourself to where programmers are led astray from the sacred RTL/Transistor language , neither understand…

I surmise the good reverend elevates Assembly not because it is fundamental, but because it is a level deeper than the domain of coders who yield unto us exploitable codes. Verily, I demand of ye, produceth thou the exploit of an Assembly 0day that was wrought from Transistor language!

Rowhammer. :P

Re: Update on 1/28 service outage

#183

Post by semi-extrinsic » Fri, Jan 29, 2016, 10:54 PM UTC

nickpsecurity wrote: post #182

semi-extrinsic wrote: post #181

Earlier quoted context omitted.

I surmise the good reverend elevates Assembly not because it is fundamental, but because it is a level deeper than the domain of coders who yield unto us exploitable codes. Verily, I demand of ye, produceth thou the exploit of an Assembly 0day that was wrought from Transistor language!

Rowhammer. :P

Haha. If you look up the rowhammer exploit on wikipedia, the example is in assembly ;)

Re: Update on 1/28 service outage

#184

Post by danneu » Fri, Jan 29, 2016, 11:21 PM UTC

ljk wrote: post #79

Maybe I'm ignorant, but why do companies rely on github? Why not just host it in-house? If there's power outage in the office then everything would be down anyways, right?

A rare two hour Github outage isn't enough to make anyone on my team want to start dicking around with internal tools.

Re: Update on 1/28 service outage

#185

Post by nickpsecurity » Fri, Jan 29, 2016, 11:42 PM UTC

semi-extrinsic wrote: post #183

nickpsecurity wrote: post #182

Earlier quoted context omitted.

Rowhammer. :P

Haha. If you look up the rowhammer exploit on wikipedia, the example is in assembly ;)

I thought you'd hit me with the Javascript one but yeah lol.

Re: Update on 1/28 service outage

#186

Post by outworlder » Fri, Jan 29, 2016, 11:51 PM UTC

bjacobel wrote: post #2

Not much detail here. A more thorough postmortem would give me more confidence they can recover from another similar issue. Hoping to see one soon.

Give them time.

Re: Update on 1/28 service outage

#187

Post by prodigal_erik » Sat, Jan 30, 2016, 12:57 AM UTC

dsjoerg wrote: post #82

forrestthewoods wrote: post #42

Earlier quoted context omitted.

And people give me shit when I argue that open source projects should include 100% of dependencies.

how far down the stack do you go? do open source projects need to include their own compiler? what would compile it?

I don't have to bootstrap anything that my distro is already shipping. If I'm using GCC, my .spec file has a BuildRequires tag that tells rpmbuild to make sure an acceptable version is present (from my RPM mirror).

If I'm using some obscure tool that my distro doesn't package, that's when I mirror the version I'm using, and build my own RPM from source if it needs to be deployed to prod servers rather than merely run from rpmbuild.

Re: Update on 1/28 service outage

#188

Post by debaserab2 » Sat, Jan 30, 2016, 1:14 AM UTC

nickpsecurity wrote: post #165

debaserab2 wrote: post #160

Earlier quoted context omitted.

If you understand the difference between the two, you'd realize your comment makes no sense. The fact that github went down due to a power failure has nothing to do with git as a solution. The fact that everyone uses git more or less the same as svn is the problem. Git is decentralized, but because so many people rely on github most don't ever use the decentralized aspect to it.

If you understood my comment, you'd know I don't understand the differences between the two that much since I haven't studied them yet. Been clear in a few comments on that. The reason I associate them here is that most projects I see don't just use Git: they use Github, too. So, I briefly wonder and get feedback about how inherent Github-style downtime was or if it was configuration/deployment issues. Several commen…

I understood your comment just fine, but the opinion you had formed was based on false assumptions, so I was trying to correct it, that's all.

Personally I try not to form strong opinions about things I haven't actually learned or understood yet.

Re: Update on 1/28 service outage

#189

Post by nickpsecurity » Sat, Jan 30, 2016, 1:23 AM UTC

debaserab2 wrote: post #188

nickpsecurity wrote: post #165

Earlier quoted context omitted.

If you understood my comment, you'd know I don't understand the differences between the two that much since I haven't studied them yet. Been clear in a few comments on that. The reason I associate them here is that most projects I see don't just use Git: they use Github, too. So, I briefly wonder and get feedback about how inherent Github-style downtime was or if it was configuration/deployment issues. Several commen…

I understood your comment just fine, but the opinion you had formed was based on false assumptions, so I was trying to correct it, that's all. Personally I try not to form strong opinions about things I haven't actually learned or understood yet.

All good haha

Re: Update on 1/28 service outage

#190

Post by ryanfitz » Sat, Jan 30, 2016, 2:10 AM UTC

secure wrote: post #180

ryanfitz wrote: post #83

I recently read a blog post from Github about them operating their own datacenter http://githubengineering.com/githubs-metal-cloud/ Im not positive, but it sounds like a fairly recent switch from a cloud provider to their own datacenter. If thats the case, Id expect a number of outages to come in the following months.

AFAIK, they never used a cloud provider.

Github was hosted at rackspace, here is there blogpost about it https://github.com/blog/493-github-is-moving-to-rackspace

From their blog posted last month:

As we started transitioning hosts and services to our own data center, we quickly realized we'd also need an efficient process for installing and configuring operating systems on this new hardware.