Grafana Labs internal source code accessed(twitter.com) |
Grafana Labs internal source code accessed(twitter.com) |
Looks like they could have invested more energy in the processes and security rather than catching up "innovation" craze that much
hadoop had only existed for 5 years at the time, at most.
he figured that someone in HR got the draft for the job advert and just added in the 7 years as a guess based on another role they were hiring for.
edit — number of years required with specific technology is just a hand wavy estimate of how important it is for the role. never treat the numbers as gospel. that was the lesson he was teaching us.
See, it is bullshit, but it is also easy enough. Claude Code is not inscrutable, this is much easier than learning, say, a new programming language. You can meaningfully learn enough to pass an interview in a couple of weeks. It's basically the same amount of information you need to learn to hype AI in HN comment section.
So yeah, I think AI is a deadend technology, far from being as useful as everyone invested on it claims. But I have been using it liberally just so I am on top of this shit, since it is the current hype cycle.
I remember one job interview where the team lead interviewing me and I had completely different takes on static vs. dynamic typing. It was an awkward moment when we realized we'd never agree, and attempting to cooperate would be very burdensome. Don't hire someone who thinks what you're doing is stupid. AI really divides the waters, better be up front.
So many companies internal codebases are of approximately zero value to any outsider. The code is only a small proportion of the business.
Given a lot of their software is OSS or OSS based there's a probable chance non-OSS is runnable and usable outside the company
The product is mostly "standalone" in that it doesn't require integrations with 3rd parties unlike, say, banking software
Critical vulnerability in that source code could enable further access to other production systems or databases.
Edit: typo
The Enterprise edition seems to focus a lot on meta-information about grafana itself: the most frequently accessed dashboard, who is viewing the current dashboard etc.
Theres also group-sync, I guess, which is useful, but honestly the selling point of enterprise is the support I think.
In fact, I might buy enterprise following this, the fact that so much is in the base product gives me the warm fuzzies.
"We recently discovered.." then later "..The attacker attempted to blackmail us"
So, I'd wager they had no idea of the breach until the attacker tried to blackmail them.
https://github.com/grafana/grafana
/s
I don't much like the securityese dialect of bureaucratese, but doesn't it make more sense as "We recently discovered that a threat actor obtained a token with access to the Grafana Labs GitHub environment, enabling the unauthorized party to download our codebase" ?
you can't just drop in buzzwords willy nilly, they buzz better in the right places.