Oracle attempt to hide cybersecurity incident from customers? • Hacker News Board

Re: Oracle attempt to hide cybersecurity incident from customers?

#81

Post by Hojojo » Mon, Mar 31, 2025, 9:14 PM UTC

decimalenough wrote: post #62

devsda wrote: post #50

Earlier quoted context omitted.

> everyone who worked there has a black mark on their CV I hope this is hyperbole. Rank and file employees are not responsible for corporate policy or direction, especially in places like Oracle.

It really isn't. Oracle has had a terrible reputation since forever, and every ex-Sun engineer I've met has taken great pains to explain they did not join Oracle voluntarily. It's kind of like working for a tobacco company or arms manufacturer in payroll or something: you're not directly responsible for killing millions of people, but by choosing to work there you're still kind of condoning it.

You're also contributing to weapons that can be used to fight violent dictators like Putin when he invades yet another country (or the same one again).

I'll never understand the West's public aversion to military R&D and manufacturing. How do you people think WW2 was won? Nice words, trade deals and hookers? At some point diplomacy fails and you need to be able to do something about it.

Re: Oracle attempt to hide cybersecurity incident from customers?

#82

Post by pedrocr » Mon, Mar 31, 2025, 9:16 PM UTC

legitster wrote: post #49

redleggedfrog wrote: post #47

Earlier quoted context omitted.

As my buddy from Oracle likes to say, "No one cares what we do as long as the flow of streak, coke, and strippers doesn't stop." He's a big Zed Shaw fan.

Anytime Oracle is brought up is a great time to repost the famous Lawnmower quote: > "As you know people, as you learn about things, you realize that these generalizations we have are, virtually to a generalization, false. Well, except for this one, as it turns out. What you think of Oracle, is even truer than you think it is. There has been no entity in human history with less complexity or nuance to it than Oracle.…

You elided the most famous quote from that diatribe. The lawnmower comparison is the expansion on:

"Do not fall into the trap of anthropomorphizing Larry Ellison"

Re: Oracle attempt to hide cybersecurity incident from customers?

#83

Post by LPisGood » Mon, Mar 31, 2025, 9:16 PM UTC

_fat_santa wrote: post #55

legitster wrote: post #40

If you are already a customer of Oracle, I can't imagine this matters to you. You did not choose Oracle because it was a good product and they are a good company. You are a customer of Oracle because there was a backroom executive deal with the Devil. No one is surprised or outraged or even has any choices.

I've started seeing ads for Oracle OCI in some podcasts I listen to so I think they are starting to see if they can attract customers outside of their "enterprise sales process". I'm not sure who those ads are supposed to appeal to besides the podcasts hosts raking in the ad dollars.

>”enterprise sales process”

I’m sorry, is Oracle known to be some super sleazy sales org that plys enterprise decision makers with strippers and cocktails, and drugs?

Re: Oracle attempt to hide cybersecurity incident from customers?

#84

Post by decimalenough » Mon, Mar 31, 2025, 9:55 PM UTC

devsda wrote: post #71

decimalenough wrote: post #62

Earlier quoted context omitted.

It really isn't. Oracle has had a terrible reputation since forever, and every ex-Sun engineer I've met has taken great pains to explain they did not join Oracle voluntarily. It's kind of like working for a tobacco company or arms manufacturer in payroll or something: you're not directly responsible for killing millions of people, but by choosing to work there you're still kind of condoning it.

I'm curious, does it end only at Oracle? What about Google, Facebook & Microsoft. They do some things that are disliked by many. Should we consider that the engineers who work there are indirectly condoning the no-privacy, ad-infested dystopia that HN hates, and should they be penalized. I bet many of these companies and a lot of others use Oracle products and there by support them directly with money. If you know th…

Some people absolutely do judge people who work at those companies, especially Facebook. Google used to have a halo but that's pretty tarnished now, while Microsoft under Satya seems to have pulled off the unlikely trick of redeeming its reputation.

Re: Oracle attempt to hide cybersecurity incident from customers?

#85

Post by nisa » Mon, Mar 31, 2025, 10:01 PM UTC

999900000999 wrote: post #63

brirec wrote: post #60

Earlier quoted context omitted.

I haven’t seen the ads, but Oracle Cloud is definitely the public cloud provider with the most generous free tier. That’s not to say you should use and trust them, but I can see why many would.

You pay in other ways. I understand if you have absolutely no money, but even then repeatedly trying to provision a server and getting a error- something like no capacity available - isn't a fun time. Whatever, I'll pay 7$ a month to not deal with that.

You can automate it using their API and some Python. It's like a puzzle game and I'm personally thankful for the free tier, it's pretty cool if you max it out you have multiple IPv4 addresses, IPv6 prefixes and so on - the machines boot via UEFI, you can run nixos and ZFS on them, you have a serial console via ssh/vnc and at least in Germany they have good connectivity and 10tb Traffic is plenty. Using it for something serious? Probably not. But for tinkering it's pretty cool and interesting if you enjoying some small quests. Running incus and some Kubernetes stuff on an arm box and 24gb memory and 200gb SSD is at least 10-20€ elsewhere.

Re: Oracle attempt to hide cybersecurity incident from customers?

#86

Post by decompiled_dev » Mon, Mar 31, 2025, 10:03 PM UTC

FlyingSnake wrote: post #68

redleggedfrog wrote: post #47

Earlier quoted context omitted.

As my buddy from Oracle likes to say, "No one cares what we do as long as the flow of streak, coke, and strippers doesn't stop." He's a big Zed Shaw fan.

I’m sorry but I don’t get this Zed Shaw reference, what did I miss?

He's a popular blogger: https://zedshaw.com/

Re: Oracle attempt to hide cybersecurity incident from customers?

#87

Post by bigiain » Mon, Mar 31, 2025, 10:09 PM UTC

FlyingSnake wrote: post #68

redleggedfrog wrote: post #47

Earlier quoted context omitted.

As my buddy from Oracle likes to say, "No one cares what we do as long as the flow of streak, coke, and strippers doesn't stop." He's a big Zed Shaw fan.

I’m sorry but I don’t get this Zed Shaw reference, what did I miss?

Weapons grade infinte snark, probably.

He seems to have stopped blogging a few years back. I kinda miss his epic rants and Learning $whatever The Hard Way stuff. Part of me hopes them and whoever used to run n-gate moved to Portland and are now running a bespoke hand made piano business together or something.

Re: Oracle attempt to hide cybersecurity incident from customers?

#88

Post by senderista » Mon, Mar 31, 2025, 10:09 PM UTC

geodel wrote: post #74

sofixa wrote: post #16

Earlier quoted context omitted.

> Seriously if I can't trust that I am going to actually be told and not lied too when there is a security incident at the bare minimum, why would I chose to work with a company? What is Oracle's end goal here? I think you're coming at this from the wrong point of view. Oracle couldn't care in the slightest about what regular people think of them. Remember, they are the company that sent lawyers after the employers o…

> everyone who worked there has a black mark on their CV. Yet they persist, continue leeching off companies too scared to make the jump elsewhere. This is just your opinion. Most people I know who work there feel just fine if not very happy. Pay/benefits are good. Work is about same everywhere. In fact depending on group there maybe good, challenging technical work there. As far as CV is concerned working there is mo…

I wonder if the senior engineering talent OCI poached from AWS (including the guy who introduced formal methods to AWS) is still there?

Re: Oracle attempt to hide cybersecurity incident from customers?

#89

Post by senderista » Mon, Mar 31, 2025, 10:11 PM UTC

mandevil wrote: post #75

Spooky23 wrote: post #69

Earlier quoted context omitted.

True, but with one exception that I saw (Memorial Sloan Kettering), every EMR that isn’t Epic is a steaming pile. And I think MSK is switching.

Epic is my wife's favorite, for sure. Both of the switch-overs she was involved in were to Epic. They also cost more than the others. One thing I have learned in my two decades of SWE'ing is how vitally important active competition is. One of the major competitors voluntarily taking themselves out of the competition so it can be sucked dry of value always seems to be good news for the market share, dominance, and pro…

As a health consumer, Epic is so dang slow that I wonder what it's like for medical professionals.

Re: Oracle attempt to hide cybersecurity incident from customers?

#90

Post by pixl97 » Mon, Mar 31, 2025, 10:12 PM UTC

MPSFounder wrote: post #45

wruza wrote: post #41

Earlier quoted context omitted.

If it works, keep it as is That's a good principle though. It doesn't make the initial choice good today or even back then. But change is always a risk that may not be worth it, cause you have to make sure that the inevitable semi-chaos coming with it is at all times lower than what you have. And analyzing that may be hard. Maybe this will help them move away from this obsolete Larry Ellison crapshot This creates pos…

I somewhat agree. I think for tangible things (cars), you don't need to reinvent the wheel. But, tech moves fast. If a superior tech (for instance, more secure) is available but requires some discomfort (moving things around), then it is worth it to avoid this type of crap

Seemingly, most companies have a terrible ability to judge if a technology is superior, hell most of the time they lack the ability to judge if a technology is massively inferior. Companies may understand what they do but they commonly have no understanding of what they do in relation to the abstraction layers between them and said technology.

Often this technology has been in place for some time and the original creators are long gone for one reason or another. To migrate away from this system the business will need to spend a significant amount on contractors/consultants to understand both the system they have well enough, and the system they are moving to. It can be a huge expense and companies are very willing to push that off into the future.