• 2 Posts
  • 151 Comments
Joined 1 year ago
cake
Cake day: June 20th, 2023

help-circle
  • Bro I wouldn’t trust most companies not to store their only copy of super_duper_important_financial_data_2024.xlsx on an old AliExpress thumb drive attached to the CFO’s laptop in a coffee shop while he’s taking a shit.

    If your company has an actual DRP for if your datacenter catches fire or your cloud provider disappears, you are already doing better than 98 % of your competitors, and these aren’t far-fetched disaster scenarios. Maintaining an entire separate pen-and-paper shadow process, training people for it? That’s orders of magnitude more expensive than the simplest of DRPs most companies already don’t have.

    Friendly wave to all the companies currently paying millions a year extra to Broadcom/VMWare because their tools and processes are too rigid to use with literally any other hypervisor when realistically all their needs could be covered by the free tier of ProxMox and/or OpenStack.


  • All of this has already been implemented for over a hundred years for other trades. Us software people have generally escaped this conversation, but I think we’ll have to have it at some point. It doesn’t have to be heavy-handed government regulation; a self-governed trades association may well aim to set the bar for licensing requirements and industry standards. This doesn’t make it illegal to write code however you want, but it does set higher quality expectations and slightly lowers the bar for proving negligence on a company’s part.

    There should be a ISO-whateverthefuck or DIN-thisorother that every developer would know to point to when the software deployment process looks as bad as CrowdStrike’s. Instead we’re happy to shrug and move on when management doesn’t even understand what a CI is or why it should get prioritized. In other trades the follow-up for management would be a CYA email that clearly outlines the risk and standards noncompliance and sets a line in the sand liability-wise. That doesn’t sound particularly outlandish to me.


  • But a company that hires carpenters to build a roof will be held liable if that roof collapses on the first snow storm. Plumbers and electricians must be accredited AFAIK, have the final word on what is good enough by their standards, and signing off on shoddy work exposes them to criminal negligence lawsuits.

    Some software truly has no stakes (e.g. a free mp3 converter), but even boring office productivity tools can be more critical than my colleagues sometimes seem to think. Sure, we work on boring office productivity tools, but hospitals buy those tools and unreliable software means measurably worse health outcomes for the patients.

    Engineers signing off on all software is an extreme end of the spectrum, but there are a whole lot of options between that and the current free-for-all where customers have no way to know if the product they’re buying is following industry standard practices, or if the deployment process is “Dave receives a USB from Paula and connects to the FTP using a 15 year-old version of FileZilla and a post-it note with the credentials”.


  • Oh I was talking in the context of my specialty, software engineering. The main difference between an engineer and an operator is that one designs processes while the other executes on those processes. Negligence/malice aside the operator is never to blame.

    If the dev is “the guy who presses the ‘go live’ button” then he’s an operator. But what is generally being discussed is all the engineering (or lack thereof) around that “go live” button.

    As a software engineer I get queasy when it is conceivable that a noncritical component reaches production without the build artifact being thoroughly tested (with CI tests AND real usage in lower environments).
    The fact that CrowdWorks even had a button that could push a DOA update on such a highly critical component points to their processes being so out of the industry standards that no software engineer would have signed off on anything… If software engineers actually had the same accountability as Civil Engineers. If a bridge gets built outside the specifications of the Civil Engineer who signed off on the plans, and that bridge crumbles, someone is getting their tits sued off. Yet there is no equivalent accountability in Software Engineering (except perhaps in super safety-critical stuff like automotive/medical/aerospace/defense applications, and even there I think we’d be surprised).


  • I strongly believe in no-blame mindsets, but “blame” is not the same as “consequences” and lack of consequences is definitely the biggest driver of corporate apathy. Every incident should trigger a review of systemic and process failures, but in my experience corporate leadership either sucks at this, does not care, or will bury suggestions that involve spending man-hours on a complex solution if the problem lies in that “low likelihood, big impact” corner.
    Because likely when the problem happens (again) they’ll be able to sweep it under the rug (again) or will have moved on to greener pastures.

    What the author of the article suggests is actually a potential fix; if developers (in a broad sense of the word and including POs and such) were accountable (both responsible and empowered) then they would have the power to say No to shortsighted management decisions (and/or deflect the blame in a way that would actually stick to whoever went against an engineer’s recommendation).



  • azertyfun@sh.itjust.workstoProgrammer Humor@programming.dev<br>
    link
    fedilink
    arrow-up
    19
    arrow-down
    1
    ·
    4 months ago

    > Clicks on <br>
    > Example is <br />


    The actual thing that matters is that the / is ignored so (unlike with XML I believe) you can’t self-close a non-void element by adding a trailing /. But “void elements should not have trailing slashes” is extrapolation on your part; the trailing slash improves readability and is kosher since it doesn’t act as a self-close.


  • Corporate behemoths are going to keep doing what they do best.

    Their ISO-whatever certification says they gotta get that kind of software, so they do. Whether it is found to actually increase business risk does not matter in the slightest, what matters is that a box is checked for the audit.

    It’s like Oracle or IBM, who did not contribute anything of value to the world since about 2005 and notoriously have some of the most aggressive licensing lawyers on the planet. But there are lots of companies out there who sort a product segment from Old to New and pick the first result on account of the fact that it’s “established”, “reputable” and “reliable”, every other consideration be damned.


  • Life is Strange’s writing is trope-y and often not that great, and my neurospicy ass doesn’t even relate with pretty much any of the nostalgic tropes about teenagehood (as far as I’m concerned these were the worst years of my life, by far, and any piece of media that wants to make me relive them is very unlikely to make its way onto my computer).

    However the game manages to more than make up for all of that with an enthralling story that fully immerses the player with compelling gameplay, meaningful choice-based storytelling, great artistic vision, and ground-breaking character acting. The whole thing is expertly calibrated to deliver emotional gut-punch after emotional gut-punch.


    Hellblade is just straight-up amazing and the Melinda Juergens’ character acting is hauntingly raw and poignant.


  • There are good sides to DST, such as coming home “earlier” (by the sun clock but not by the social clock) from school or work and therefore having more hours of daylight during the free time after work. These positive effects may go beyond subjective feelings. A study has shown for example that activity increases with longer evening daylight (Goodman et al., 2014) – albeit with small biological effect sizes (≈6% difference in the daily activity between the Standard Time of the year and DST, adjusted for photoperiod). Interestingly these results of the above study were culture-specific: a significant increase was mainly observed in Europe and to some extent in Australia, while no significant effects or even slightly negative effects were seen in the United States and Brazil.

    Fucking duh. This is the sticking point for me, and I am disappointed that the article doesn’t mention the effect of latitude here. Very easy for muricans to say “DST is not useful” when these fuckers never get pitch-black night before 6pm or full daylight before 6am ST.

    Brussels is on the same latitude as Calgary. ST robs every office worker of one hour of useful daylight. That’s it. That’s the whole argument for permanent DST. Businesses will not change their opening hours, so permanent ST means a net loss of one active hour in the day for every office worker. Permanent DST in Europe means someone working 9-6 would not have to drive home at night for 4 months of the year and could maybe even take the dog for a walk in the evening sun.


  • The main display that shows your speed,etc. randomly shutting down

    I know two people who had this exact issue with their new-gen Golf. First cause was the French language would crash the whole dash if you cycled the dashboard views (to my knowledge they never fixed the issue and the workaround is to set the car to English). Second cause was a malformed JPEG from a radio station would cause the dash to bootloop until you drove far enough from said radio station, which would allow the car to work long enough to disable that feature (IIRC).

    So yeah, QA is down the fucking drain with VW on their latest gen. They had a new CEO, and now a new one again I think? But the reputational damage has been done. Too bad, I really liked my '18 Polo.



  • It’s not as bad nowadays that apps yielded to GNOME’s bullshit. Back when GTK2 apps were still common… Urgh. Plenty of apps were broken without it for no good reason.

    I like opinionated UX - I use sway - but GNOME’s approach is incompatible with “general use” and only works (for now) because of canonical’s weight and ability to impose their vision as the only vision.

    Also they didn’t replace the tray with a better way to manage background apps, so they can suck a dick on the UX front.


  • The fucking system tray. Which literally every other DE and mainstream OS out there supports because some apps depend on it and break if it doesn’t exist.

    Last I checked GNOME devs said “no, we will never support it, because we’ve DePRecATeD the tray in GTK”.

    It’s functionality so basic I have 3-6 apps which depend on it at any time on my work machine. Anyone saying it doesn’t fall under “basic functionality” is either a GNOME dev or a troll.


  • The kind of farming that makes any money isn’t slow work.

    It is, however, tangible work with tangible results. Unlike spending months changing the polarity of nanoscopic silicon structure for the non-appreciation of an utterly clueless salesperson whose braindead ideas will have left the world in a worse state than you found it despite anyone’s best efforts.

    I should seriously get into woodworking. Kidding. Sorta.


  • The kind that rails on “anti authoritarianism”? Or do you have a charitable interpretation of “authoritarianism” that is somehow compatible with democracy?

    I also fail to see what any of that has to do with capitalism, which I have neither defended nor mentioned yet you brought up.

    Goddam arguing with tankies and their endless litany of non-sequiturs is such a pointless exercise.



  • Typical Stalinism/Maoism: Anyone who opposes my implementation of Marxism is an enemy of the proletariat and can be persecuted to any extent. These people agree with the mainstream idea that communism can’t be implemented democratically, but come to the conclusion that democracy must be abolished.

    This meme is an open dogwhistle to tankies and thankfully meaningless to anyone who hasn’t fallen into or interacted with this small subsection of the far-left.


  • azertyfun@sh.itjust.workstoProgrammer Humor@lemmy.mlBeing Agile
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    5 months ago

    What kind of non-agile bottom-up software projects have you experienced? Bottom-up waterfall? I guess it’s possible in theory but that would be a sight to behold.

    My only point is that in most situations, upper management are fools that should be left to their devices and should never get a say in development methodologies. By definition if upper management imposes Scrum, it’s a self-defeating prophecy.

    Waterfall Agile Scrum
    Top-down Can be great (esp. with rigid requirements like fintech, for safety-critical systems, or integration with traditional engineering processes with rigid schedules and feature sets) but will probably be more expensive Bad managers trying to make-up for their own lack of foresight Can’t exist (but some companies pretend very hard)
    Bottom-up Probably can’t exist (but I haven’t seen anyone try) Yes Yes

    Your average tech company should be somewhere in the bottom-right, but bad managers are trying to pull the needle upwards to justify their existence or make up for their incompetence. But they still call that “Agile” (which can be true by some definitions of the word) or “Scrum” (which that isn’t, by definition).


  • Good software does not come out of companies without a bottom-up approach to software development. Top-down approaches are either terrible or extremely expensive.

    Agile development is something that at my company we fought for, not against. It’s literally impossible to fight against actual agile development since it has to come from the workers. Agile is not scrum, and neither are a collection of ceremonies. It’s just a framework to give agency to developers.