Hacker Newsnew | past | comments | ask | show | jobs | submit | piratejon's commentslogin

Wow, almost 10 months from the first reported file corruption until identification as an exploitable bug.


I'll bite, why the "Wow"?

It was a random, intermittent file corruption that didn't cause real harm to the authors organization and was, clearly, very tricky to track down.


I don't have a basis for how long this might take. As the author mentions "All bugs become shallow once they can be reproduced.", but only after spending probably the largest amount of time waiting for new incident reports to come in, and then analyzing the reports (e.g. to determine most incidents occurred on the last day of the month), and hours staring at application and kernel code. It's very impressive, but certainly the largest amount of time in the 10 month duration was not actually debugging. The "moment of extraordinary clarity" probably sprung out of years of experience.


Ah, I guess my thinking is that they didn't really focus on it. It was annoying but not high priority ... until they started to get an inkling of what was actually going on.


Agreed, about 99% of admins I know would not be able to identify this error, and most likely most Hacker News reads. The last sentence on your post is very true.


If not 99.999%

I’ve worked with (and been) a dev for several decades, and I can count on one hand the number of folks who would have a chance of figuring this out, and 2 fingers the number of folks who WOULD.

Of course, most never try to optimize or go so deep like this that they would ever need to, so there is that!


Seeding the geocities torrent is kinda cool. http://ascii.textfiles.com/archives/3046


Reading the last paragraph, I did not come away with the same impression you did: "Regina is now a photography technician at Barnet and Southgate College."


I think OP meant the past tense they used when talking about Regina. The last paragraph did clear the confusion.


And the fact that it was "discovered" which makes it sound like it was found in a dead person's lab or something. The article really gives the impression that she's dead, which is odd if that's not what is intended.


I think your statement is more true of CentOS than Ubuntu. Many Ubuntu server installations choose it because it is free and reputedly easy, and pass up CentOS because it doesn't have a lot of selling points that appeal directly to non-Linux users, nor RHEL because it costs money.

Also your comment reminds me of an argument against stealing music on the Internet, lol.


I wanted to voice my concurrence with the sentiment ensconced in the rudeness you are probably being downvoted for: I am in my twenties, generally operate from the perspective of one who thinks he "has shit to do" (in fact I use that very phrase frequently to characterize my obligations and commitments), and don't see myself having time to learn a new tool, method, or technique every time I have a need to express myself, whether professionally or personally. I don't believe this attitude is uncommon and is probably worth taking into consideration by those who would persuade people like your brother and me to use new things. Such as node.js.


Node.js is just JS running on server. I would rather invest in learning some strong functional language. The more different high-level _paradigms_ you learn in your twenties - the better.


it's a strategy that Ubuntu should use, i think... that "killer app" strategy.


The killer app is gvim and ctags.


Were you trying to be anything other than condescending?


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: