News for hackers. Stuff that matters.
Re:The Web Is Broken – Botnet Part 2 by ryandrake on Saturday April 19, 2025 @04:58PM (#43739417)
I think developers are paid to competently deliver software to their employer, and part of that competence is properly vetting the code you are delivering. If I wrote code that ended up having serious bugs like crashing, I’d expect to have at least a minimum consequence, like root causing it and/or writing a postmortem to help avoid it in the future. Same as I’d expect if I pulled in a bad dependency.
Re:The Web Is Broken – Botnet Part 2 by baumy on Saturday April 19, 2025 @05:21PM (#43739580)
Your expectations do not match the employment market as I have ever experienced it.

Have you ever worked anywhere that said "go ahead and slow down on delivering product features that drive business value so you can audit the code of your dependencies, that's fine, we'll wait"?

I haven't.

Re:The Web Is Broken – Botnet Part 2 by ryandrake on Saturday April 19, 2025 @07:51PM (#43740394)
Yea, and that’s the problem. If such absolute rock bottom minimal expectations (know what the code does) are seen as too slow and onerous, the industry is cooked!
Re:The Web Is Broken – Botnet Part 2 by ClumsyPilot on Saturday April 19, 2025 @09:34PM (#43740888)
Yeah, about that, businesses are pushing and introducing code written by AI/LLM now, so now you won't even know what your own code does.
Re:The Web Is Broken – Botnet Part 2 by djeastm on Saturday April 19, 2025 @07:19PM (#43740236)
Due diligence is a sliding scale. Work at a webdev agency is "get it done as fast as possible for this MVP we need". Work at NASA or a biomedical device company? Every line of code is triple-checked. It's entirely dependent on the cost/benefit analysis.