Hacker News Reader

The statement was that they acted professionally.

I don't know if they are or are not professionals.

It is just my opinion that being nice and prompt about removing cause of the damage after they have caused damage through recklessly ignoring industry standards cannot be reason to call their entire set of actions around this particular issue as "professional".

View on HN

It shows lack of experience to suggest having a gap in testing is somehow "recklessly ignoring industry standards". If you look at Symfony's test suite it's clear that they take testing extremely seriously and keep their tests up to date in a way that's far superior to my experience with "industry standard". If you look at the fix for this issue which is linked from the OP you'd see that the first thing they did is add a unit test to prevent this kind of issue from happening again.

If you consider that kind of behavior recklessly unprofessional I'd be amazed to see the kind of tests you write for your code.

FYI, the GP comment said "The issue was resolved/disclosed very quickly, and in a professional manor."

So they didn't say their "entire set of actions" was "professional" just that it was disclosed and resolved professionally.

Reply on news.ycombinator.com