News for hackers. Stuff that matters.
Re:If macOS High Sierra shows your password instead of the p... by davidkuhta on Thursday October 05, 2017 @04:11PM (#15412227)
I was just reading about something similar in the "Ask HN: What essay/blogpost do you keep going back to reread?" post

Joel Spolsky's point: They did it by making the single worst strategic mistake that any software company can make: They decided to rewrite the code from scratch.

https://news.ycombinator.com/item?id=15407114

Re:If macOS High Sierra shows your password instead of the p... by borplk on Friday October 06, 2017 @04:08AM (#15415158)
> They did it by making the single worst strategic mistake that any software company can make: They decided to rewrite the code from scratch.

Statements like that, while powerful are dangerous as they turn into baseball bats for people to hit each other with.

And they become an excuse for ignoring things and becoming an absolutist religious zealot.

There are legitimate cases where rewriting the code from scratch can be the single BEST strategic decision.

(And of course, vice versa)

If I have strong rational reasons to believe that a rewrite is warranted quoting Joel Spolsky or anyone else is not going to change my mind.

Re:If macOS High Sierra shows your password instead of the p... by maltalex on Friday October 06, 2017 @01:42PM (#15418689)
> Statements like that, while powerful are dangerous as they turn into baseball bats for people to hit each other with.

I love that analogy.

I see it again and again with so many of the "classics" - phrases like "premature optimization is the root of all evil" and "adding manpower to a late software project only makes it later". Sure, these statements are right more often than not, but the zealousness with which they are often applied leads to an enormous amount of mistakes.

There ARE cases in which optimizations aren't premature. System architecture is all about designing a system for optimal performance in some area or another. And in some cases, bringing in more people to a late project can speed things up.

Re:If macOS High Sierra shows your password instead of the p... by diegoperini on Friday October 06, 2017 @09:21AM (#15416555)
>...as they turn into baseball bats for people to hit each other with

I will quote you a lot from this time on. It is such a true and widely applicable judgement.

Re:If macOS High Sierra shows your password instead of the p... by Dylan16807 on Thursday October 05, 2017 @05:39PM (#15412772)
I reject that comparison. This is not rewriting a core product with tens of millions of lines of code. This is a small utility program. It's very often no problem to just make a new utility program. Especially one that's in the single digits on how many coder-months it costs.
Re:If macOS High Sierra shows your password instead of the p... by Osmium on Thursday October 05, 2017 @06:30PM (#15413058)
Yeah, I can see how a rewrite makes sense. It's not rewriting diskutil itself, it's adding a new UI, that presumably uses newer APIs that will be easier to maintain in the future.

The problem really is that the new Disk Utility is a minimal viable product, rather than an app that can actually do everything the diskutil command line utility can do.

And then you have terrible bugs like this, which is presumably a non-security engineer writing a bit of UI code that they shouldn't be. I doubt this bug actually came from the APFS encryption itself.

Re:If macOS High Sierra shows your password instead of the p... by DonHopkins on Thursday October 05, 2017 @06:33PM (#15413069)
Yeah, I think the problem is that they rewrote everything but the disk utility.
Re:If macOS High Sierra shows your password instead of the p... by eradicatethots on Thursday October 05, 2017 @06:22PM (#15413011)
There are no rules in soft dev
Re:If macOS High Sierra shows your password instead of the p... by j45 on Friday October 06, 2017 @12:20AM (#15414392)
I don't know if a rewrite is about whether it's large or small, it's about the years of hardening many scenarios.
Re:If macOS High Sierra shows your password instead of the p... by Dylan16807 on Friday October 06, 2017 @12:54AM (#15414518)
A simple utility doesn't need that much hardening against corner cases, and in this instance the bug is a main use case.