Hacker News Reader

>Maybe it's time to ditch that coldfusion stack?

[Linode developer here]

Been working on (re)writing things in Python since I started. It takes a while, but I think everyone recognizes that the CF codebase is difficult to maintain. The good news is that significant progress is being made and we're still doing routine audits of the existing stuff.

View on HN

>we're still doing routine audits of the existing stuff.

This doesn't work, auditing coldfusion code is impossible without auditing the entire platform. The whole platform is so full of bugs and strange behaviour that it's actually impossible to produce secure coldfusion code.

I can't really deny that CF is that bad, but it'd be irresponsible to just let the codebase rust as we rewrite it - and we are rewriting it.

When did you start rewriting it? It doesn't take years to replace this stuff.

I was hired in July and have been driving most of this effort and we're shipping rewritten versions of some parts of our infra soon™

That sounds good, at least, thanks for letting us know.

Reply on news.ycombinator.com