Hacker News Reader

If the CTO builds an engineering team that lacks the expertise to write a regex that matches the company's own name, and builds a culture of security and quality process that failed to catch this before shipping to production, then the CTO should be fired for cause.

Unfortunately the CTO also owns the company.

View on HN

I wouldn’t go that far but there is a teachable moment here. It goes to show how little engineers actually read PRs/MRs these days…it’s just become a rubber stamp at this point. This is not a problem specific to X, I’d wager a lot on that. It’s a widespread cultural problem in our industry. Remember XZ?

How is that connected at all to the Twitter fiasco? One is a very sophisticated backdoor attempt in an open source library, the other is an utterly boneheaded and simplistic mis-feature in a closed source platform. They could hardly be more different.

Reply on news.ycombinator.com