HN user

devhead

317 karma
Posts1
Comments195
View on HN

I wonder if this may mean we will see the Terraform dogmatic approach to declining to implement much requested functionality in the name of "it doesn't fit our ideals" go by the wayside. I hope so, otherwise, OpenTofu here I come; or well, I'm sure someone's got a ML infra tool in the works by now.

I always have mixed feelings when a software company like this grabs their bag and leaves the community that helped build them, high and dry; good for them but still bad for everyone else nine out of ten times.

we'll see what the courts say with this. American government used to decry "the great china firewall" yet here they come all holding hands to raise up an American one, against the American people. This is not a Ban on TikTok, it is a blockage and suppression of our freedom of speech, and to freely associate.

The US government suddenly can find common grounds to do something and it's to restrict US? no thanks.

It's not a ban on TikTok; they are proposing a restriction that will be applied to American companies in order to try and block American's access to an online web service.

I do not agree with such restrictions nor would I if the role was reversed; in my opinion, any politician that supports such an encroachment on our rights will never have my support or vote. I would additionally be open to boycotting their corporate and wealthy donors since they seem to only listen to money.

I do however, wholeheartedly support enacting legislation to protect our data, require security around it and to block the sale of it.

i would add that this must include executives; 2 years ago we all got the same 3% while executives got 40% (while overseeing a stock drop of 65%).

one side effect though is w/o equity it's easy to feel a lack of motivation to work as hard if you get the same raise as everyone else who might not be doing great work.

keeping your servers on the public network is not a good idea for a variety of reasons such as security, cost, control, access and compliance.

AWS makes money, it's a trade off; you can just as well put up an ec2 as a nat that is able to auto scale if you need to give your servers access. or only attach one during updates, etc.

edit: word

The amount of corporations and government agencies that scrape/pull/share our public data is greater than just OpenAI and M$; so get them all involved as defendants. In the US, the absent of strong data protections is a result of that dependency being influenced by business interests and will not allow such lawsuits to have a leg to stand on.

nice. I fight to keep any dev langs from being installed directly; docker keeps me from having to fight between versions. (exception: Terraform, using chtf for the win).

Same here.

I always default to "I work in IT". If that person is in the space I might go into specifics; but even then majority can't relate or understand the role i spend my days working in.

It also has the benefit of coming across as more blue collar and I catch less grief, as the disdaine for tech workers continues to grow.

for my company we still see it in use after all these years and countless security incidents because it's just left there. I could not personally ever imagine wanting to install that and thinking it's a good thing.

Recently I have had to help restore one that was completely infected, before we acquired the business. The amount of BS that still is exactly the same as it was the last time i was forced to manage WP in the early 2000's is insane. I get the draw, I just don't agree with it and would never openly advocate for it to be considered.

Every reason to not use it can be excused if you want to make an excuse for it or do something different with it, but at the end of the day it's dated and offers more headache and pain than any usefulness of it as a tool in hosting a site.

Here's some of my bug A boos...

- Doesn't scale

- Wants open permissions on files

- Wants you to use plugins

- Exposes services it doesn't need to expose

- Hardcode's FQDN in links and resources, and everything it can

- Defaults to be the dumbest install settings to make it "easy" for everyone

- Debugging is still a nightmare

- Logging is not consistent

- Maintains state on a machine, preventing you from scaling or high availability

- Codebase has no real framework to extend and use, preference on adding your own bad code to it in order to make it work.

- Does not work well with CI/CD automations

- Is a huge target of vulnerability scanners

- Page updates use a huge post size that is expensive to inspect w/firewall

- Making changes can and will take your site down

- Lets you modify a template file from the gui, but only the first directory level, making you still need to push changes to underlying files in a template.

- Performance is a joke

- Problem with a plugin can crash the full site

- SQL injection is still a significant problem

again, i know someone can rationalize them all away; you are putting in a ton of work that you could have done otherwise with a better solution and not have the ongoing limitations and nightmare associated with it. If you run it, you should consider it to already be hacked and move accordingly.

Often times i hear the argument, well there's nothing i need on there so it's not a security risk...i think your customers would dissagree when they start getting infected with crypto miners, clicking affilitate links that aren't yours, linking to malware, viewing content you didn't add, downloading files that are dangerous, using your hacked system to attack others, and on and on.

edit: format

i personally do not like either of those techniques; send me a link to your features, have a demo we can sign up for without a phone call, and please have pricing posted.

I find that often in the vendor selection process, i'm already neck deep in research; i don't need another series of calls for you to descibe your product or ask me what I'm looking for.

Some of their problems are tied to their severe tech debt, weak leadership, poor vision of the future, lack of understading of the present, all the while relying on 3rd parties to profit instead of them actually making a better product and providing (with 8k headcount) changes with any sort of velocity. oh and they killed off their main competitor in Trello; but sweet now my user is deleted an i have to use atlassian user now. :: sighs :: all this and we still have to pay premium to use it?

hope they give these employees a good exit, it's the leaderships own fault.