Hacker News new | ask | show | jobs
by paddlepop 1459 days ago
This is a build deployment perspective.

I for one do not miss hosts never being patched because all those slight modifications to systems files that were tweaked several builds ago and now everyone is too scare to touch.

I won't miss the 12 month projects to upgrade some dated software to a slightly less dated version of that same software.

From my perspective in Security, DevOps has made life much better.
2 comments
fragmede 1459 days ago
The ability to spin up a box, have it run insecure code, and then spin it down; and the ability to do that all day long, is worth it for the security benefits that all this complexity entails.
link
HWR_14 1459 days ago
> The ability to spin up a box, have it run insecure code, and then spin it down; and the ability to do that all day long

What's the best way to do that? I have some insecure code that needs to run about 6x a day, and so far my best thought has been an isolated box outside my network that does the internet based fetches, translates the data and then submits them over the web to another service that verifies/checks the output.

link
tech_tuna 1459 days ago
At my first company, our builds happened whenever the release engineer (he was friends with the milk man and chimney sweep) felt like "doing a build".

As another example, CI/CD adds a lot more work and maintenance but it results in better overall hygiene.

link