News for hackers. Stuff that matters.
Re:How to gain code execution on hundreds of millions of peo... by Eisenstein on Saturday March 01, 2025 @03:22PM (#43223274)
And if it is the programmer's fault, what can we do about it? People are trying to avoid finding a solution that isn't throwing their hands up in the air. We either need to solve the problem in a place that is effective with the situation as it is (the tools) or we need to solve the situation such that it has consequences for doing the wrong thing on the part of the developer. Which shall it be?
Re:How to gain code execution on hundreds of millions of peo... by ImPostingOnHN on Sunday March 02, 2025 @09:19AM (#43230740)
Since those are only 2 options, and there are many more options, I'll pick option 3: convince people to value and fund universal education more from preschool on, building a better foundation for engineers and other professions in the decades following.

In addition to that, it'd be cool if the blameless postmortems were made public, so everyone could learn from them.

As for the other 2 options of restricting freedom, and extremely blameful postmortems, I reject both.

Re:How to gain code execution on hundreds of millions of peo... by Eisenstein on Sunday March 02, 2025 @03:35PM (#43234761)
Yes, being held accountable for your decisions is a restriction on your freedom.
Re:How to gain code execution on hundreds of millions of peo... by ImPostingOnHN on Sunday March 02, 2025 @05:41PM (#43236035)
I still choose the third option, because it is the better of the three, compared to restricting what functionality the software people write is allowed to have, and extremely blameful postmortems (which are bad).
Re:How to gain code execution on hundreds of millions of peo... by Eisenstein on Sunday March 02, 2025 @07:32PM (#43236942)
All restrictions are bad, and accountability is bad. Got it. I'm glad to have had this discussion with you; very thought provoking.
Re:How to gain code execution on hundreds of millions of peo... by ImPostingOnHN on Sunday March 02, 2025 @11:39PM (#43238366)
Again, I still choose the third option, because it is the better of the three, compared to restricting what functionality the software people write is allowed to have, and extremely blameful postmortems (which are bad).

You seem really stuck on the first two options. Why does it matter, given that the third is the best? Do you still insist on your false dichotomy?

Re:How to gain code execution on hundreds of millions of peo... by Eisenstein on Monday March 03, 2025 @06:56AM (#43240891)
It isn't exactly surprising that someone who is the beneficiary of a system which has no accountability is against the imposing of such, I was just hoping you had something better to offer back than 'I don't like it' and assertions that something is bad without ever explaining why. I have no idea why 'blameful postmortems' are bad because you never told me, you just say it is. Why should I change my mind in that case?
Re:How to gain code execution on hundreds of millions of peo... by ImPostingOnHN on Monday March 03, 2025 @11:36AM (#43243508)
>I have no idea why 'blameful postmortems' are bad because you never told me

Usually when you don't know something, you ask someone who knows. Since you sort-of asked here, I'll give you the answer:

Blameless postmortems lead to fewer failures, which is ostensibly the goal here. So what do you get from your idea of blameful ones? Feeling good about punishing someone, even though you're increasing failures by doing so?

Re:How to gain code execution on hundreds of millions of peo... by Eisenstein on Friday March 07, 2025 @04:53PM (#43295158)
That you assign me the responsibility of asking you to explain your assertion sheds a lot of light on this interaction.

Either rhetoric and discourse are unfamiliar to you (for instance, that a basic tenant is that one does not make a strong claim which acts as foundational evidence for their entire premise and then assume it to be taken as fact based on statement alone -- if that were true then 3rd graders would win all arguments by saying 'nuh-uh'), or you don't understand that responsibility can also apply to you in many cases.

Re:How to gain code execution on hundreds of millions of peo... by ImPostingOnHN on Sunday March 09, 2025 @12:06PM (#43310411)
I get that you had your own premise that blameful postmortems were good, and you for sure aren't alone -- it's pretty natural homo sapien thinking to believe punishment for misbehavior always leads to less misbehavior. Did you question those assumptions, though? When those assumptions were challenged, did you pause to think "Hmm, why DO I think that? Is it true?"

There's an even deeper assumption here, too -- you kept referring to blameful postmortems as "accountability", which leads me to think that you might believe you can't have accountability without blaming and punishing individuals. If this is indeed an assumption you hold, you should question whether it, too, is false.

The fun part is, my existence isn't necessary for you to do this, so your personal preferences regarding my tone and style won't affect your introspection and the resulting answers! :)