bpchaps
Joined 12 years ago
Joined 12 years ago
So, either they don't care that they broke those workflows when they made this change, or they didn't know that the workflow breakage would be bad. Both are shitty and implies a lack of understanding of their core user base. So, sending customer reps out like they are now screams to me that gitlab really only cares about presentation.
At least to me, it feels hollow, just like your response right now. It makes me think that Gitlab knew that there was going to be a backlash, and only sent your team out to mitigate damages. "There is no such thing as bad publicity" sort of deal.
If Amazon did the same thing you were doing right now, everyone would be up in arms.
That said.
The method of encoding production database credentials was rot-13. No joke. In the Quartz interface, you could double click on a starred-out set of credentials, and it would run rot-13 on it and display the password. This was for FX, rates, credit card, mortgage, etc etc etc. Having access to this cloud system gave effective access into all of Bank of America and Merrill Lynch.
They probably save a lot of their money by using very, very bad practices.
Still only the second worst security fail I've seen.
Fun fact: Chicago's city hall has a retention period of zero days on its cameras. Go figure.
So, imagine you have a massive celestial body floating out in space, with a large gravitational field. Its gravitational field is always propagating. Now, take that celestial body, and make it completely and instantaneously disappear. There's now a gravitational differential between the now-gone body, and its previously propagated gravity field. You should be able to detect that if you're close, say through tidal differences.
Very similar happens with black holes colliding, except the gravity differential comes from the two black holes oscillating near each other, close to the speed of light.
Edit: this obviously isn't exactly how this works, since it makes a lot of assumptions, such as the ability to instantaneously remove something. So, don't think of this as how "things actually work", but as a model to help build your intuition.