this post was submitted on 31 May 2024
89 points (97.8% liked)
Cybersecurity
5618 readers
169 users here now
c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.
THE RULES
Instance Rules
- Be respectful. Everyone should feel welcome here.
- No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
- No Ads / Spamming.
- No pornography.
Community Rules
- Idk, keep it semi-professional?
- Nothing illegal. We're all ethical here.
- Rules will be added/redefined as necessary.
If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.
Learn about hacking
Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !cybersecurity@lemmy.capebreton.social !securitynews@infosec.pub !netsec@links.hackliberty.org !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub
Notable mention to !cybersecuritymemes@lemmy.world
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
It solves virtually none of them, it is pretty good at destroying all the evidence needed to actually fix the problem for good though.
I don't have 40 hours to dedicate to a single error message that pops up only on Tuesdays during a full moon and Jeff just needs to print his stupid report.
bingo!
I hate when a restart fixes it. It means it will never be fixed.
we are not talking about backend systems here.
we are talking about user devices in the wild, likely in an unknown state, with highly variable usage patterns by the user. someone with experience can usually determine how deeply to poke based on 30 seconds of questioning the user.
"reboot" is absolutely valid when the issue is trivial, non-recurring and the equipment is not sensitive. if a reboot destroys logs then the device was not important to you to begin with.
My experience has been the exact opposite of this.
Restarting a system gets it into a known state making debugging easier.
There are times you don't want to restart, if your a software developer and a long lived process is behaving erratically and you haven't been able to figure out why via telemetry and this problem has been super hard to reproduce...... But this is a very niche and rare circumstance. Most scenarios the first priority is to get things working ASAP, so the first thing you do is restart.
Hell, many production systems restart periodically to just get closer to a known good state as a matter of hygiene.
And what are you going to debug when the problem does not occur and you do not know how to reproduce it? There is a lot of information you can only gather while the problem occurs. And yes, this is from the software developer and sysadmin perspective, not from the layman perspective. I would rather spend a little bit more time on the problem now instead of having it occur again and again without getting any closer to an actual solution.
The first piece of information you get is : does the problem persist beyond a restart
Every investigation takes time, I'm glad that your able to satisfy yourself with in depth investigations when necessary.
For non-life critical systems, the average protocol is to restart and see if it persists and only debug if the issue becomes problematic
Are you a doctor? Coz living beings is the only case I can think of where this is true.