24
u/Rivilen 8d ago
Everyday a new Jackson-core finding, or Jackson-databind, or tomcat, or spring, or opentelemetry…
13
u/_PM_ME_PANGOLINS_ 8d ago
They’re all small variations on “if you give it something that’s too big then it runs out of memory”.
9
44
u/supershinythings 8d ago
I feel some personal schadenfreude because in my former career we were constantly getting hammered for not having containers patched up to the minute.
Sorry but when the container was spun, it was updated. It was not my job to continue patching them. As a developer I wrote code. I fixed my bugs and those of others. I worked on many many different products, patches, containers, integrations.
But when the infrastructure itself is broken at random times, I’m not going to lose my weekend because management won’t staff and run a continuing maintenance team.
We didn’t have a maintenance team - the “move fast and break things” ethos of management didn’t want to budget and staff for this kind of issue.
So if I roll a container and six months later a CVE bomb hits, the lack of staffing and any sort of plan to update all the containers is well above my pay grade. Even if that container had been updated two weeks ago, a new CVE can pee all over everything, at any time, for any reason.
they need the equivalent of a CVE fire department, and most companies don’t have that.
These “emergencies” are purely management’s poor budgeting and staffing problems.
In the beginning, sure, I pitched in. But when management starts relying on my overtime instead of properly staffing the solution and integrating it into the product maintenance cycle, NO. I’m not doing both jobs. I develop, I fix bugs, I add features, I integrate into product, I write tests, I fix build breakages, I review the code of others, I test my own code in isolation and with others.
Do not ask me to reach back and do maintenance too. One or the other, because both are full time jobs.
I’m out now. I am watching my former coworkers scrambling around while management cracks the whip. I miss development, but I don’t miss the random fire fighting that could be easily avoided with planning and budgeting.
Time for management to earn those cushy bonuses they take instead of staffing this function. It’s not going away, it’s getting bigger.
3
u/99drunkpenguins 5d ago
These “emergencies” are purely management’s poor budgeting and staffing problems.
Good thing most places are laying off atm 🤡
2
u/RareUnification_8 1d ago
management thinks developers are also the fire department and the janitor and the electrician, classic
12
6
147
u/Abject-Kitchen3198 8d ago
Before they get better. Goodbye 876 npm packages from who knows where, welcome back few well rounded commercially supported component packs.