News for hackers. Stuff that matters.

A comment on When security goes right. Parent comment

Re:When security goes right by ddoolin on Thursday December 25, 2014 @11:09PM (#8798010)
We have pushed severe/security issues to production nearly as fast to a major bank. Granted we had the attention of an entire team but this ISP seems to be much smaller and these tools probably see a lot less use.

Out of curiosity, how long do you think it would take to where you wouldn't be concerned? It seems hard to me to be really concerned without knowing exactly what changes were made, how many people were involved, and what kind of process they have in place for pushing code out the door.

[ Parent | on HN ]
Re:When security goes right by danieltillett on Thursday December 25, 2014 @11:27PM (#8798042)
I agree if the issue is critical that you want to get the fix out as soon as you can. I also agree with you that we don't really know the full background here, but I am concerned when this is being held up as a good way for a company to behave.

I can only speak for myself, but I never push any non-critical changes out on a customer facing application in less than a day. I like to think about what I have done overnight just to make sure I am not breaking something. Even doing this I have still managed to break things on occasion :)

[ Parent | on HN ]