I’d rather they be thorough, and I expect their technical resources are a bit constrained. (Plus, I’m pretty sure the user-facing site is or was built in Ruby, and I have no idea what security best practices are for that.)
Realistically it can’t take this long if the person working on it has knowledge required, it might be just a generous estimate or they are going for full backup restoration from some kind of very slow cold storage.
If we were talking about people for whom this was their job, I would agree that they were being way slow, but we’re talking about a group of volunteers who’re cramming this into their free time along with all their other obligations. In that situation, it sometimes takes as long as it takes.
I’m not saying that they aren’t working hard, might be some other circumstances are preventing them from re-deploying/fixing it, in my experience with infrastructure work cutting single task into smaller chunks staggered over time actually makes it harder.
Again there are probably other factors there and it’s not simple ‘re-deploy older version’ kind of task.
I’d rather they be thorough, and I expect their technical resources are a bit constrained. (Plus, I’m pretty sure the user-facing site is or was built in Ruby, and I have no idea what security best practices are for that.)
Realistically it can’t take this long if the person working on it has knowledge required, it might be just a generous estimate or they are going for full backup restoration from some kind of very slow cold storage.
If we were talking about people for whom this was their job, I would agree that they were being way slow, but we’re talking about a group of volunteers who’re cramming this into their free time along with all their other obligations. In that situation, it sometimes takes as long as it takes.
I’m not saying that they aren’t working hard, might be some other circumstances are preventing them from re-deploying/fixing it, in my experience with infrastructure work cutting single task into smaller chunks staggered over time actually makes it harder.
Again there are probably other factors there and it’s not simple ‘re-deploy older version’ kind of task.
If it was a data breach, they may be doing forensics to see if the backups are also infected.