News for hackers. Stuff that matters.
Re:Squarespace Enters Definitive Agreement to Acquire Google... by jay_kyburz on Thursday June 15, 2023 @11:30PM (#36350780)
Google seems to have bailed on Google Cloud. You should try and find something in the docs these days.

When I first started using GAE 10 years ago it really felt like somebody lovingly crafted a nice solution to a complex problem.

It's not that anymore.

Re:Squarespace Enters Definitive Agreement to Acquire Google... by cardy31 on Thursday June 15, 2023 @11:33PM (#36350807)
The company I work for is on GCP and I live in fear of seeing the “Google to shut down GCP by $now + ~2 years” headline.
Re:Squarespace Enters Definitive Agreement to Acquire Google... by jay_kyburz on Friday June 16, 2023 @12:08AM (#36351097)
I'm living that now. I will no longer be able to push changes to my Python 2.7 apps as of January.

Instead of porting to Python 3, I'm porting away from Google.

Re:Squarespace Enters Definitive Agreement to Acquire Google... by delecti on Friday June 16, 2023 @12:40AM (#36351355)
Python 2.7 released 14 years ago. About 8.5 years ago (5+ years later), it was announced that Python 2.7 would be supported until 2020. You had over 5 years to prepare for it, and then Google supported it for another 3 years beyond even that generous warning.
Re:Squarespace Enters Definitive Agreement to Acquire Google... by katbyte on Friday June 16, 2023 @01:13AM (#36351654)
So?

Let’s say you had an old large code base in 100,000s of lines of code that just works and has been mostly untouched for years in eol/maintenance. you expect there to be budget or time to rewrite it into python 3 for literally no reason other then “2.7 is deprecated”?

It’s far cheaper, potentially millions cheaper, to just change clouds/providers and find a way to continue on 2.7.

Re:Squarespace Enters Definitive Agreement to Acquire Google... by aniforprez on Friday June 16, 2023 @01:55AM (#36352020)
> Let’s say you had an old large code base in 100,000s of lines of code that just works

I've migrated 200k LoC python 2.7 codebases to python 3. It certainly wasn't painless but tools like black, flake8, 2to3 and other stuff helped. It's not impossible and can be executed in 2-4 weeks

> you expect there to be budget or time to rewrite it into python 3 for literally no reason other then “2.7 is deprecated”

2.7 is not just deprecated. It's dead. There's no more updates. It's not "millions cheaper" to not migrate. I posit you'd save a LOT of money from the sheer performance improvements and bug fixes from migrating than anything else. In my own case we saved a few hundred dollars a month from not having to spawn new containers and EC2 instances

Re:Squarespace Enters Definitive Agreement to Acquire Google... by jay_kyburz on Friday June 16, 2023 @02:39AM (#36352387)
To be clear, I am upgrading from Python 2.7, but while I do it I'm not building in a way that requires any code from Google and will make sure the app is platform agnostic.
Re:Squarespace Enters Definitive Agreement to Acquire Google... by bbarnett on Friday June 16, 2023 @03:55AM (#36353007)
Having any sort of code on python 2.7, means you don't give a rat's ass about security. It also immediately means your code should be assumed to have back doors, vulnerabilities, because python 2.7 almost certainly does!

This is what happens, when no one is maintaining software.

Security is more important that anything, certainly than having time or not to update your code.

You're 100% in the wrong here, and Google is 100% in the right, and I hate Google more than spammers, more than pretty much any other company there is.

They're not wrong here, and it hurts me to support their stance.

Fix your stuff. Stop blaming others. I doesn't matter why you're in the situation you're in, you're wrong to be there. No matter what.

Re:Squarespace Enters Definitive Agreement to Acquire Google... by solardev on Friday June 16, 2023 @08:49AM (#36355708)
Companies suffer security breaches all the time and nothing really seems to happen. Who is it important to?
Re:Squarespace Enters Definitive Agreement to Acquire Google... by katbyte on Friday June 16, 2023 @10:34AM (#36357187)
Not all code is a website or publicly accessible…
Re:Squarespace Enters Definitive Agreement to Acquire Google... by bbarnett on Friday June 16, 2023 @05:00PM (#36363793)
Unless it is air gapped, it is accessible.
Re:Squarespace Enters Definitive Agreement to Acquire Google... by katbyte on Friday June 16, 2023 @07:01PM (#36365156)
at the point that would matter you have more pressing things to worry about then old code.
Re:Squarespace Enters Definitive Agreement to Acquire Google... by bbarnett on Friday June 16, 2023 @08:09PM (#36365689)
It's not just old code, it's an old compiler too. One with security issues well known, unpatched.

If you think security is an afterthought, you're doing it wrong.

Re:Squarespace Enters Definitive Agreement to Acquire Google... by katbyte on Friday June 16, 2023 @09:08PM (#36366114)
again: not everything sits on the public internet, and by the time someone gets access to the application there are far more serious concerns then python 2 vs 3

this also really highlights the problem with python's 2 vs 3 split: there is a large body of work that will never be updated and will forever run 2 including actual web/publicly facing code. And saying "just upgrade because security" isn't going get much of that code upgraded.

Re:Squarespace Enters Definitive Agreement to Acquire Google... by bbarnett on Sunday June 18, 2023 @11:54PM (#36387152)
and by the time someone gets acces

This sort of thinking, is why places get hacked. You don't know what the access vector is. Stop making excuses. Secure your shit.

I would be so happy if a law was passed, and such actions were criminal.

Re:Squarespace Enters Definitive Agreement to Acquire Google... by katbyte on Friday June 16, 2023 @10:33AM (#36357169)
It really depends on the codebase and how complex or well written it is, and the. How much it costs/takes to validate and test. A website is going to be much easier and quicker then something in finance where testing and validating is by far the expensive part.

Your code took a month, not everyone’s will.

so again something is just running and working why spend the money and or time when there are potentially far more important things to spend limited resources on?

op even said “yes I’m gonna but I don’t have the time” be

Re:Squarespace Enters Definitive Agreement to Acquire Google... by jay_kyburz on Friday June 16, 2023 @04:23AM (#36353222)
Active State is providing support and patches for 2.7 for exactly this reason.
Re:Squarespace Enters Definitive Agreement to Acquire Google... by afavour on Friday June 16, 2023 @12:32AM (#36351286)
I’ll blame Google for a lot but in this instance I think they’re right. Python 2.7 is EOL, they’d be foolish to keep running it indefinitely on the servers they’re responsible for.
Re:Squarespace Enters Definitive Agreement to Acquire Google... by yencabulator on Friday June 16, 2023 @12:09PM (#36359029)
You seem to be confusing AppEngine with Google Cloud. Former is a tiny part of the latter.
Re:Squarespace Enters Definitive Agreement to Acquire Google... by steve_adams_86 on Thursday June 15, 2023 @11:51PM (#36350959)
Interesting, I first used GCP maybe 7 years ago and really liked it. Two years ago I came back to it for a year and couldn’t put my finger on it, but it seemed quite a bit worse. I wasn’t sure if it was a case of rose tinted glasses.

Like you mentioned, the docs were really shoddy when I needed them. Certain conventions felt half baked compared to AWS, and I don’t even like AWS to begin with. Overall it seemed like the integration of services was much worse than AWS, though. Administration of different services is like visiting separate worlds at times, like the teams might not be on the same page regarding design and technical language. The other possibility is I’m just a little dumb and don’t pick up on the patterns — I’m pretty open to that.

It’s a shame, I wish there was a cloud provider that I actually liked and at one point, that was GCP.

Re:Squarespace Enters Definitive Agreement to Acquire Google... by DaiPlusPlus on Friday June 16, 2023 @12:00AM (#36351036)
> It’s a shame, I wish there was a cloud provider that I actually liked

I'm curious what it is about Azure that puts you off.

Re:Squarespace Enters Definitive Agreement to Acquire Google... by jaxn on Friday June 16, 2023 @12:17AM (#36351166)
I’m on Azure, it’s still Microsoft. I like a lot of Microsoft stuff these days that plays nice with open source dev tools. Azure doesn’t get in the way of that, but my defaults are not their defaults.

I’m perfectly happy with AKS. Their Postgres product is great (formerly citus). But at the the end of the day, they still want to sell Windows, Exchange, SQL Server, Active Directory, etc. That’s a choice I will probably never make, so it just feels like a mismatch.

Re:Squarespace Enters Definitive Agreement to Acquire Google... by popinman322 on Friday June 16, 2023 @01:10AM (#36351620)
Active Directory is actually pretty good I think. Having worked with both Azure and AWS, AzureAD makes AWS IAM permissions feel half baked.

Granted my experience was inside Azure so we had the benefit of vertical integration.

Re:Squarespace Enters Definitive Agreement to Acquire Google... by steve_adams_86 on Friday June 16, 2023 @01:14AM (#36351665)
AWS IAM is one of the worst AWS products I’ve used. I should take a look at AD.
Re:Squarespace Enters Definitive Agreement to Acquire Google... by dumpsterdiver on Friday June 16, 2023 @02:42AM (#36352403)
> I like a lot of Microsoft stuff these days that plays nice with open source dev tools.

I've spent very little time in the Microsoft ecosystem, but several years ago I was on a contract with a Microsoft shop and I found the MS server-related offerings to be pretty solid (granted, I was not the one paying for them).

The one thing that still shocks me (and maybe it's changed since I last checked, but I'm guessing not) is their pricing model around some offerings that are applied per processor core. Holy moly! Need to blow a lot of cash really fast? Then MS SQL server is for you. Fortunately (/s), it was a government contract, and at that point in the fiscal cycle they were desperate to blow cash so they didn't get less of it the next cycle.

That's always seemed like a perverse incentive to me: the people who do more with less resources get fewer resources the next round. Wouldn't it make more sense to give them more resources and incrementally expand the scope of their duties? They're clearly doing something right. Of course, it's always a balancing game. Perhaps the reason they were so efficient is because they had a limited amount of work to be done, and with more work they may not have performed with the same efficiency.

Perhaps the reasoning behind such a policy is that they're not generally looking for super heroes who might burn themselves out after doing amazing work. They're looking for people who are okay being a little bored, but who will reliably get a specific job done.

Re:Squarespace Enters Definitive Agreement to Acquire Google... by steve_adams_86 on Friday June 16, 2023 @01:14AM (#36351655)
I should have been clear. I’ve barely used Azure. I helped a team migrate to it from AWS a while ago, and that went really well for a few reasons but the platform didn’t really grab me. Maybe that’s because I’m just not interested in delving into yet another platform and I should give it more of a chance.

Comparable infrastructure on Azure somehow ended up costing that team around 60% of what their AWS setup cost which was a bit confusing. Their monthly spend went from $900 CAD to about $650. I never had a chance to dig deep on that, but I assume that before there was something clumsy happening with allowing expensive resources to live too long or something. It was a big difference for such a small company though.

I’m not sure if that’s a thing (Azure being cheaper) but it made me think I should do price comparisons there next time I have a budget conscious client who isn’t already partial to another platform.

Re:Squarespace Enters Definitive Agreement to Acquire Google... by monero-xmr on Friday June 16, 2023 @12:00AM (#36351039)
They still offer startups money to switch. Last year they offered my company 8 figures to go from AWS to GCP. Of course I said no because… that’s insane and useless. You have to wonder how many companies they are paying to use their subpar tech.
Re:Squarespace Enters Definitive Agreement to Acquire Google... by Masema on Friday June 16, 2023 @01:11AM (#36351637)
8 figures of what, doll hairs?

Seriously, 10s of millions wasn't worth switching?

Re:Squarespace Enters Definitive Agreement to Acquire Google... by monero-xmr on Friday June 16, 2023 @01:16AM (#36351688)
It would have taken a solid year of work and all of my DevOps resources, for what? The customers won’t know or care. If I wanted to burn $5 million in salary and a year of feature development I’d rather figure out an on-prem solution, because at least someone might want that. The “pay to switch cloud” model doesn’t make sense.
Re:Squarespace Enters Definitive Agreement to Acquire Google... by bbarnett on Friday June 16, 2023 @03:58AM (#36353018)
If you have time, please hit me up on my email via my profile. I'd just like to ask a couple of questions.

Thanks

Re:Squarespace Enters Definitive Agreement to Acquire Google... by thebytefairy on Saturday June 17, 2023 @02:34AM (#36367867)
Hackernews loves to hate google, but I find gcp way more user friendly and simpler to understand and just get things running than on aws.
Re:Squarespace Enters Definitive Agreement to Acquire Google... by scrollaway on Friday June 16, 2023 @12:07AM (#36351088)
Given how much effort they’re putting into vertexai I doubt they’re bailing on cloud.

I wager it’s just expensive to run a registry. I wouldn’t be surprised if this is what they’re really selling (the TLDs), rather than the registrar.

Re:Squarespace Enters Definitive Agreement to Acquire Google... by petercooper on Friday June 16, 2023 @04:52AM (#36353485)
It appears to be the opposite to me. They appear to be selling the public facing registrar. Their wholesale registry, which appears to hold the TLDs, is Google Registry: https://www.registry.google/

I suspect Google finds it a lot easier to run a registry with a few enterprise clients than to deal with flesh and blood customers owning domains.