The xz backdoor is, well, setting a fire under the entire Linux ecosystem... but I'm also so impressed with how it was set up: 2-yr maintainership, oss-fuzz, etc.

...and who knows how long it would've stayed undetected if the injected sshd code ran faster (<600ms)

Highlights:

What’s sufficient for 99% of applications

I absolutely loved this talk by Charity Majors at #srecon . She wrote charity.wtf/2017/05/11/the… 6 years ago and there is still so much truth in all of this, that I really appreciate the reminder about what really is important. Thank YOU! ❤️

As always I can strongly recommend swinging by the honeycomb.io booth at #SREcon emea. Get your stickers!

Excitement is building for #SREcon ! Great to catch up with colleagues and put faces to Twitter handles finally

My feeds on LinkedIn, Twitter, and Mastodon are full of hot takes on the Amazon Prime Blog posts. So many of them completely miss the point of what is going on. Amazon does NOT describe how they migrated Prime Video into a Monolith. They refactored one (Micro)Service.

Oof

An interesting discussion I had yesterday: why are so many people even doing kubernetes? I'm strongly considering doing a talk on reasons why people just shouldn't.

So does blocking Elon earn me an account deletion? Asking for a friends friend.

Today, we visited MaibornWolff GmbH in Munich and got together for very interesting talks about #SRE .

Thank you to all speakers and attendees. It's so nice to see this event growing.

stadia.com/controller #Bluetooth

The key is not to focus on systemd or Kubernetes but the fundamentals they implement.

For example, it was discovered that Europe couldn't authorise the expenditure to buy enough diesel to cover the generators during an outage. That was actually relatively easy to fix, compared to some other things.

The Usenix LISA conference is no more. It is replaced by the Usenix SRECon. Here's my (at times very personal) retrospective about the LISA conference, and how much it changed the industry. Enjoy! usenix.org/publications/l…

Treat your ops scripts as code, so this ain't you. Yes, write tests and everything! #SREcon

“The change was introduced on Dec 10th but because of a holiday code freeze it was not pushed out until Jan 6th so most of the context to the change was lost”

The inherent risk of code freezes is on display in this Azure ARM talk by @sierra563 and brendandburns #srecon

this.