It seems that you're using an outdated browser. Some things may not work as they should (or don't work at all).
We suggest you upgrade newer and better browser like: Chrome, Firefox, Internet Explorer or Opera

×
avatar
scientiae: Or, perhaps, you have watched the (classic!) Sneakers?
avatar
Darvond: Unfortunately no. Nor have I seen Hackers or even Get Smart or The Man from Uncle.
Everybody knows there are too many secrets.

(I haven't seen Hackers since its cinema release, but we regularly watch Sneakers, and usually watch Spy Game afterwards. :)
avatar
Magnitus: Given that we don't have access to GOG's financial information
As CDP is publicly traded they need to release some: https://www.cdprojekt.com/en/investors/financial-summary-report/
There is also some more detail information including some about GOG somewhere there.
low rated
avatar
paladin181: how completely mired in stupidity the forum software is, and they're too incompetent to fix it because the guy who cobbled it together in 1997 left and now trying to unfuck their site without a complete rewrite of everything is not feasible.
avatar
Magnitus: To be fair, a lot of places are like this for some time after starting up.

They have very limited money when they start so they'll either hire a very small team of cheap in-house developers (I try not to stereotype, but I've observed a pattern where a lot of those developers implement the whole thing in php) to implement their website or they'll outsource the coding to a small company, specialised in making websites on the quick. Either way, the rule of the game is to implement everything yesterday on a shoestring budget.

Even if the developers involved were top notch developers (they usually aren't... most of them haven't updated their skills enough to use anything better than php afterall and often will lack awareness of sound design patterns/standards like using proper REST for http apis even over a decade after such patterns have become widely known), the time constraints pretty much guarantee that the resulting system will suffer from significant technical debt right out the door.

From there, they'll hopefully start making money and the amount of income they generate will dictate the future quality of the system. If they make tons of cash, they'll be able to hire one or more teams of skilled developers with more time to improve the code (at that point, they'll either do a complete rewrite from scratch or slowly refactor away the legacy codebase, depending on how much of a mess things really were and how much resources they can invest).

If they don't make as much money as originally anticipated (keeping in mind that their primary goal is to turn up a healthy profit, they won't hire a crack team of developers if it will eat away a significant portion of their profits, even if they could do so while remaining green), then technical debt won't be repaid (or will be repaid extremely slowly) and the system will probably remain cr*ppy for the remainder of the company's lifespan (after which it will, thankfully, be shelved).

Given that we don't have access to GOG's financial information (and frankly, I haven't taken a look at their codebase, though the fact that they are still working in php is definitely not a good sign), its hard to know exactly what is happening there.
Thee's a slight flaw with what you said. It's a bit of nuance, but it's really worth mentioning because it leds to how people fail to see the difference between a publicc and private company. A private company can afford (and will so if they believe the project is worth it) to hire craack developers. A public forporatin, however, cannot, due to legal constraints.
avatar
kohlrak: Thee's a slight flaw with what you said. It's a bit of nuance, but it's really worth mentioning because it leds to how people fail to see the difference between a publicc and private company. A private company can afford (and will so if they believe the project is worth it) to hire craack developers. A public forporatin, however, cannot, due to legal constraints.
Financial reasons, more than anything else. The private company will usually be able to pay more for talent.

However, if devs really believe the project they are working on is of significance, they might accept a pay cut to work on it. Money is not everything.

Based on the offers I get so far on an almost weekly basis (some of them with salary figures upfront), I estimate I'd easily make ~40k more a year (probably even 80k+ more if I was willing to relocate) working in the private sector (not that I'm poorly paid right now by any means), but then I probably wouldn't be working on open-source projects for genome research for hospitals/universities. My other senior colleagues are competent enough that I'm sure they've had their fair share of higher salary offers as well.

Will I take such a paycut for the remainder of my career? I don't know, that's a tough sell, but certainly for a couple of years while I make sure those very important greenfield projects are done right (the parts of it that I can impact anyhow). I'm not sure I'll encounter such a mandate again in my career.

After that, it will probably be back to working on private codebases for some suits who just wants to make a buck and nevermind anything else. I'll be making more money, but I'll be looking at those years that I'm living right now with envy.
Post edited February 12, 2021 by Magnitus
low rated
avatar
kohlrak: Thee's a slight flaw with what you said. It's a bit of nuance, but it's really worth mentioning because it leds to how people fail to see the difference between a publicc and private company. A private company can afford (and will so if they believe the project is worth it) to hire craack developers. A public forporatin, however, cannot, due to legal constraints.
avatar
Magnitus: Financial reasons, more than anything else. The private company will usually be able to pay more for talent.
Actually, going public usually offers you more liquid assets immediately, which is the primary reason to go public. The reason is strictly legal why this happens, though: a public company's stocks are traded, on average, 40 seconds after being bought. This means that usually people are milking the fluctuations in the stock market for retirement funds and the like, not actually investing in companies (which is what happens at the private level). Due to this, the law will punish companies that drop alot in value in favor of hiring the best and brightest in hopes for a larger return on said investment.
However, if devs really believe the project they are working on is of significance, they might accept a pay cut to work on it. Money is not everything.

Based on the offers I get so far on an almost weekly basis (some of them with salary figures upfront), I estimate I'd easily make ~40k more a year (probably even 80k+ more if I was willing to relocate) working in the private sector (not that I'm poorly paid right now by any means), but then I probably wouldn't be working on open-source projects for genome research for hospitals/universities. My other senior colleagues are competent enough that I'm sure they've had their fair share of higher salary offers as well.

Will I take such a paycut for the remainder of my career? I don't know, that's a tough sell, but certainly for a couple of years while I make sure those very important greenfield projects are done right (the parts of it that I can impact anyhow). I'm not sure I'll encounter such a mandate again in my career.

After that, it will probably be back to working on private codebases for some suits who just wants to make a buck and nevermind anything else. I'll be making more money, but I'll be looking at those years that I'm living right now with envy.
That's lovely.
avatar
kohlrak: Actually, going public usually offers you more liquid assets immediately, which is the primary reason to go public. The reason is strictly legal why this happens, though: a public company's stocks are traded, on average, 40 seconds after being bought. This means that usually people are milking the fluctuations in the stock market for retirement funds and the like, not actually investing in companies (which is what happens at the private level). Due to this, the law will punish companies that drop alot in value in favor of hiring the best and brightest in hopes for a larger return on said investment.
Ah, it just occurred to me that I misconstrued your meaning.

You meant private vs publicly traded companies and I thought you meant privately owned companies vs crown corporations (ie, companies that are essentially state owned).

Then yes, you are correct: obligations toward profit-driven investors is a limiting factor concerning what the company can do and nips any concept of self-determination right in the bud (a publicly traded company is more akin to a piece of software written to make money than it is to an individual... its behaviour in the face of most moral quandaries tends to be predictable).

For this reason, I personally find that private company have the capacity to make moral decisions, unlike publicly traded companies (though morally, I would still place them below the average guy on the street, not because the average guy on the street is better, but because on average, self-determined entities have a tendency to act toward self-interest and the amount of power the average guy in the street has is more or less proportional to his share in the self-interest pie while the amount of power your typical medium to large company has tends to be disproportionate relative to their share of the self-interest pie).
Post edited February 14, 2021 by Magnitus
FWIW, GOG Support tells me that the GOG services were not accessed during the hack.
This article (German unfortunately) wonders if CDPR was the buyer:
https://tarnkappe.info/cyberpunk-2077-quellcode-nach-ransomware-angriff-verkauft/
It also says this suspicion came from Twitter. The reasoning in the article is like:

The buyer was anonymous.
The buyer demanded that nothing (else) was to be leaked.
And nothing (else) was leaked.

It also names 'Victoria Kivilevich' - supposedly a security analyst from 'KELA' - as a source. No mention of the suspicions here that the hackers just wanted to 'save face' and failed to sell anything.
Post edited February 24, 2021 by Zrevnur
avatar
kohlrak: Actually, going public usually offers you more liquid assets immediately, which is the primary reason to go public. The reason is strictly legal why this happens, though: a public company's stocks are traded, on average, 40 seconds after being bought. This means that usually people are milking the fluctuations in the stock market for retirement funds and the like, not actually investing in companies (which is what happens at the private level). Due to this, the law will punish companies that drop alot in value in favor of hiring the best and brightest in hopes for a larger return on said investment.
avatar
Magnitus: Ah, it just occurred to me that I misconstrued your meaning.

You meant private vs publicly traded companies and I thought you meant privately owned companies vs crown corporations (ie, companies that are essentially state owned).

Then yes, you are correct: obligations toward profit-driven investors is a limiting factor concerning what the company can do and nips any concept of self-determination right in the bud (a publicly traded company is more akin to a piece of software written to make money than it is to an individual... its behaviour in the face of most moral quandaries tends to be predictable).

For this reason, I personally find that private company have the capacity to make moral decisions, unlike publicly traded companies (though morally, I would still place them below the average guy on the street, not because the average guy on the street is better, but because on average, self-determined entities have a tendency to act toward self-interest and the amount of power the average guy in the street has is more or less proportional to his share in the self-interest pie while the amount of power your typical medium to large company has tends to be disproportionate relative to their share of the self-interest pie).
Precisely.
avatar
Zrevnur: This article (German unfortunately) wonders if CDPR was the buyer:
https://tarnkappe.info/cyberpunk-2077-quellcode-nach-ransomware-angriff-verkauft/
It also says this suspicion came from Twitter. The reasoning in the article is like:

The buyer was anonymous.
The buyer demanded that nothing (else) was to be leaked.
And nothing (else) was leaked.

It also names 'Victoria Kivilevich' - supposedly a security analyst from 'KELA' - as a source. No mention of the suspicions here that the hackers just wanted to 'save face' and failed to sell anything.
And so, CDP was also saving face by negotiating behind the scenes? Honestly surprised TW3 source wasn't bought. Kinda not surprised by the rest, though. Imagine being CDP and playing in the auction and winning 'cause no one thinks your code is worth much.
Post edited February 24, 2021 by kohlrak
It looks like the recovery process still has a long way to go.

CD Projekt Ransomware Hack Severely Disrupts Work on Cyberpunk Updates

What the Polish publisher didn’t say is that most of its employees have been locked out of their workstations for the past two weeks, according to people familiar with the matter.
...

CD Projekt has said it refused to pay a ransom to the hackers. As a result, employees remain unable to log onto the company’s virtual private network, making it impossible to access the systems and tools needed to do most of their jobs, said the people, requesting anonymity because they weren’t authorized to talk publicly.
These workers can do nothing except twiddle their thumbs, as they have been asked to ship remaining computers back to CDPR's IT department for malware scans.

I suspect that people making unofficial fan patches will be more productive this month.
low rated
Oh, how convenient. Now the hackers are responsible for the delays and superb Cyberjunk game. Good thing I never preordered this game.
avatar
john_hatcher: Oh, how convenient. Now the hackers are responsible for the delays and superb Cyberjunk game. Good thing I never preordered this game.
:P yeah
they probably got ptsd from the hack and can't work for long hours
very convenient indeed
avatar
Magnitus: Given that we don't have access to GOG's financial information
avatar
Zrevnur: As CDP is publicly traded they need to release some: https://www.cdprojekt.com/en/investors/financial-summary-report/
There is also some more detail information including some about GOG somewhere there.
Thanks for the link. A bit worrisome that they talk a lot about Galaxy in their strategy for GOG, but they don't mention drm-free at all: https://www.cdprojekt.com/en/capital-group/strategy/
avatar
Mortius1: It looks like the recovery process still has a long way to go.

CD Projekt Ransomware Hack Severely Disrupts Work on Cyberpunk Updates

What the Polish publisher didn’t say is that most of its employees have been locked out of their workstations for the past two weeks, according to people familiar with the matter.
avatar
Mortius1: ...

CD Projekt has said it refused to pay a ransom to the hackers. As a result, employees remain unable to log onto the company’s virtual private network, making it impossible to access the systems and tools needed to do most of their jobs, said the people, requesting anonymity because they weren’t authorized to talk publicly.
avatar
Mortius1: These workers can do nothing except twiddle their thumbs, as they have been asked to ship remaining computers back to CDPR's IT department for malware scans.

I suspect that people making unofficial fan patches will be more productive this month.
Wait, they're using an AV to find the virus instead of reformatting a computer known to be infected? Didn't theAV fail the first time?
Post edited February 25, 2021 by kohlrak
CDPR got hacked so now they'll have to stop working on CP2077 and move on to their next top project, Gwent 2.