Remix clone Hacker News

What do "Freezes" mean? Like, do you stop renewing your certificates? Do you stop taking in security updates for your software?

Sure maybe "unnecessary" changes, but the line gets very gray very fast.

▲

Spivak 4 days ago | parent | next [-]

It's not very grey, prod becomes as if you told everyone but your ops team to go home and then sent your ops team on a cruise with pagers. If it's not important enough to merit interrupting their vacation you don't do it.

▲

fragmede 4 days ago | parent | prev | next [-]

Certs shouldn't still be done by hand that this point; if another heartbleed comes out in the next 7 days then the risk can be examined, escalated, and the CISO can overrule the freeze. If it's a patch for remote root via Bluetooth drivers on a server that has no Bluetooth hardware, it's gonna wait.

you're right that there's a grey line, but crossing that line involves waking up several people and the on call person makes a judgement call. if it's not important enough to wake up several people over, then things stay frozen.

	▲	kbolino 4 days ago \| parent \| next [-]
		There's still a lot of situations where automatic certificate enrollment and renewal is not possible. TLS is not the only use of X.509 certificates, and even then, public facing HTTPS is not the only use of TLS. It needs to get better but it's not there yet.
	▲	aaomidi 4 days ago \| parent \| prev [-]
		Right, that's basically what I mean. There are a lot of automated changes happening in the background for services. I guess the whole thing I'm saying is that not every breakage is happening because of a code change.

▲

vrosas 4 days ago | parent | prev [-]

No unnecessary code deployments.