Absolutely, truly hilarious to point to the Equifax breach when the same Struts vuln is present in Oracle products.
HN user
horusthecat
"The COTS industry is under an anti-commercial attack". Oh no, not the COTS industry!
In my experience, the most technologically savvy F100's are all VERY familiar with utilizing in-house dev, and as recent releases from AWS/Azure might suggest (SQL Server on linux, Aurora support for postgres/mysql, etc) OSS is a key part of this as well.
Ding ding ding fries are done! Oracle is deeply concerned with losing customers to PaaS and Saas providers. Part of Oracle's current model is to push its mixed and private cloud offerings for their customers--AWS and Azure have a huge share of that market already.
It's Oracle, though, and they have a huge presence in the gov't sector... They're trying to reclaim that as much as possible by moving in on the Trump Administration's transparent give-aways to favored parties.
They hate us for our freedoms
I would consider using it because:
1. I work in a backwards enterprise shop where "no one ever got fired for choosing Microsoft" and it would be easier (read as "possible) to get IT here to support it than Postgres. (That said, they do support Mongo internally but won't admit that to software teams)
2. It's much cheaper than Oracle, which is the other "enterprise" database where it's easier to get an install done
3. It's not Oracle
The thing I find crazy is that in 2017 $20M movies with B-list names are getting picked up as "independent". Ridley Scott's name shows up on IFC movies now; It Follows had an excellent ROI compared to most "blockbuster"; Get Out was a sold-out hit with audiences and critics... but it's all just a blip compared to the latest Transformers or DC or Marvel franchise shit-show.
A few millenia from now archaelogists and historians will be pontificating about Hollywood the way we do about the Pyramids.
...except neither is, and Hollywood accounting is a real thing. Even domestic-market box office failures tend to turn a profit internationally.
This is the most hilarious thing posted to HN in a while
I heard some scuttlebutt about two years ago after Oracle got rid of some Java people that Oracle had wanted to leverage Java-as-a-Service as a cloud product, sort of like Google Compute, but just never managed to get there... The Sun acquisition, someone told me, "was a hardware acquisition". With SPARC/Solaris dead, Sun staff gone and the lawsuits against Google over Java faltering Oracle has sucked the last marrow out of the bones and is just casting them off now.
When i read about the "hardware integration" of OSX/macOS/whatever I really have to wonder.
Power 32 bit is dead. Apple never ventured into other architectures. macOS (and OSX 10.whatever plus since the mid 2000s) are running on x86 and stumbling towards ARM; iOS runs on ARM. It's still commodity hardware, just like Windows and Linux.
I understand that Apple supports a much smaller set of hardware and drivers, but in my mind it's not really 'integration' the way, say, dinosaurs like SPARC + Solaris or POWER virtualization under AIX is integrated hardware with software. I'm really just being cranky here and splitting hairs.
Bourgeois law in its wisdom protects individual property owners from their mistakes, unless they affect owners of larger property... that said, Equifax may have just fucked over the entire retail/consumer credit industry in the US, so the hammer may very well fall on them. We might get some of those banker perp-walks everyone loves.
But with the current administration as well as Congress (we're likely to see a Federal gov't shutdown over the budget even though the Republicans control the legislature and White House), I wouldn't anticipate seeing any regulation down the pike because of this.
They mention the Struts vuln, but not which one... did an attacker access the info directly via a naive attack, or was this a campaign? Having worked on Enterprise-Ready(tm) systems I wouldn't be surprised if Equifax had an unsegmented network...
Who is "we"? I'm not a Google shareholder.
To Verizon, yes, but who said there isn't a secondary market for that information? I'm reminded of how Facebook is a net buyer of information from Oracle: there's a thriving resale market.
Thank god, I was wondering what I'd replace Solaris with
This isn't true. Even 10 years ago it was pretty normal for litigation involving the SEC to routinely have half a million or more hard copy pages shipping between law firms and the gov't, and 10 years ago about half of all documents that printing and scanning vendors were handling in discovery were paper. The American legal system and US-based law firms are notorious for that sort of thing. See also Iron Mountain.
Or conversely big players will pony up for larger operations to exploit marginal inefficiencies and other economies of scale, which is what seems to be happening.
Additionally you're assuming the only motive behind mining bitcoin is the value of bitcoin, effectively ignoring realities like, e.g., that entities use it to avoid capital flight regulations.
I'll throw in my 2 cents and say I've worked in "open" floorplans I didn't mind--but these were always at on ghost-town-empty offices for companies that were living on investor life support in spaces that could have housed 3x more people without being crowded
"Buy don't build" becoming such an embedded piece of wisdom that there are literally a half-dozen COTS appliances that do the same thing, but not inventorying them, to the point that you might have just one or more likely zero people using them. Literally no one watches our DLP tool, but we keep paying for it.
It's basically a field day for consultants and for appliance vendors. I'm not a huge fan of NIH but it's really demoralizing to see money get spent on toys that immediately get locked up in the attic.
Corporate IT - which is now it's own behemoth in most modern organizations. IMHO it's actively preventing any work getting done
I will co-sign to this every day of the week and twice on sundays. In our org chart, developers are not "IT" and getting nearly anything done that requires involvement from IT borders on impossible.
I honestly will probably never work for this sort of Microsoft/Oracle/IBM shop ever again unless I get a blood promise I can use a Mac or Linux workstation, get on-demand development VM creation, and have absolutely 0 Oracle product I'm required to integrate with.
The org I work at is so old that it still has groups with "Wintel" in their names, but the UNIX guys (the majority of our non-windoze stuff is AIX) aren't any better. It literally feels like I'm in a time warp back in the 1990s.
Some horror stories:
- having a systems engineer tell me to put in a ticket for the purpose of making a phone call to discuss something that had no pending action needed on his part
- having a DBA tell me the same thing
- having a DBA not know how to turn on query logging
- getting told we had to put together a hardware acquisition plan to do an in-place upgrade of database modules
- having a ticket to get log rotation turned on ignored for months and then told (when logs filled up the disk) that they'd have to turn off the service
- tediously going through change control to alter permissions, elevation rights, etc., only to have "implemented" changes mysteriously disappear the next time security patches were applied
- requesting and getting access to some very nice and expensive commercial applications only to be told that our use case was unsupported
- a half-dozen vendors' antivirus clients on windows machines
- unplanned outages during non-brownout/storm conditions corrupting databases
Ironically enough, some of the PMs (who are generally non-technical) we've talked to in IT literally complain about the exact same sort of problems.
The upside is I can take two or three hour lunch breaks whenever I have to wait on these guys, which is a couple times a week.
Having been using BTRFS at home for years, i get the exact opposite impression... I've had bugs (kernel panics) that just disappear on the next update. I'm happy with the RAID1 ease of use. But even there, like some have said, manual scrub/balance--which is still nice to have--indicates a design flaw.
If I was in ops I would not use btrfs on anything but lab experiments... if i can get hardware RAID, then I can blame the vendor and the equipment
It's almost as if you can frame a 'data-driven' argument and limit the universe of what people imagine to be possible, while pretending to be 'rational' and 'scientific' the whole time!
Of course it cuts both ways. A better headline would have been "Nuclear: sure it's dirty but are you really trying to tell us coal is safer".
Apple has released some rumblings that it's going to bring back a modular Mac Pro and keep it on x86 even if it goes to ARM for the Macbook, but I wouldn't hold my breath.
My off-the-cuff response is that cryptocoins behave more like a commodity more than a currency, so their value is always relative to cash, not part of global cash reserves.
Does anyone know where the money that initially went into the cryptocoins during the run-up this year came from, or where it went?
I'm taking this and Nvidia's announcement it was going to sell a mining-oriented GPU as the shot over the bow for cryptocoins. But then again, only market-makers get rich calling a top.
Because Lennart has a lot of pull at Red Hat... We don't need a reinvent-the-world solution like systemd to address the most complained about problems with init.
You work in software right?
You never ever "just" replace a system with an improved feature-alike product, you go apeshit crazy with cool stuff you wanted for the past 5 years but couldn't get approved, until you run out of budget. Duh.
It's not a holy war, but it does have a lot of politics, which engineers like to pretend don't exist.
Here is the only solid criticism of systemd I've read that focuses on design (as opposed to bugs that surface from the sprawling throw-it-over-the-wall approach to development): http://blog.darknedgy.net/technology/2015/10/11/0/
Notably, darknedgy hosted/hosts uselessd, which was a lightweight version of systemd. On the whole i think the idea underlying systemd, of graph-based management of services and system state makes more sense that wonky initscripts garbage.
Technical discussion aside, I rarely see mentioned is that, what in my opinion, systemd resembles a lot of "politics-driven-development" i've worked on before. It's sprawling and ambitious--which means bugs--and like a high-politics project there's a certain incentive i perceive to downplay bugs--which also means it's a great way for RHEL to centralize control over things they didn't have say in previously as well as standardize, etc.
I'll go ahead and beat up on it more by saying that if the project is going to be used cudgel-like, I wish it would more loudly start talking about stuff like formal analysis, fuzzing etc., because it would be a great opportunity to promote research-y stuff in the "email your patches" world of OSS development.
Which is fine, but running Arch workstations for nearly ten years now, there's been a lot of gore with systemd... more than i'd like to see in PID1.
Of course, I hate writing C code with a passion so I'm just a whiner really.
It's not proprietary groupware is why it's better
you must not work enterprise much
When you say "performance" do you mean at or below the price point? POWER is open but seriously expensive.
W/r/t the OP, I have trouble thinking that the Linux Subsystem is as full a solution as it's made out to be, but on-topic discussion isn't not what comments thread brawls are for!
I'm consistently amazed that the response is always that "Windows sucks" even as it's gotten better than the 95/XP/Vista experience. It's 2017, .NET runs on Linux now and VS runs on macOS, can't we all just get along? Of course, that sentiment exists for good reason even as Microsoft improves its product offerings. Every stable Windows install is just one third-party enterprise shitware deployment from automating BSOD reboots.
Tooling aside--VS is great if you add "finally" and "for some tasks" and if Powershell ever reaches a finished state that'd be good, but I still don't use either--regardless of how slap-dash and inconsistent Windows (lol X11) can be, the part of Windows that sucks the most is working at companies that require its use. If you haven't worked somewhere where people aspire to be "Sharepoint Administrators", where people "fix" prod data in Access and where >25% of your CPU cycles go to black-box antivirus vendor apps that had unpatched CVEs discovered in the past month, you really should so you can remember why you left.
We made it a requirement for managers to use our internal application. Har-har-har