Maybe I’m just being a spoilsport here but someone should point out it’s not your job to worry about an attack like xz unless you are in a very precise role and this is fun but you should get back to disabling NTLMv1 on Monday and patching your network devices.

Gosh, this sounds terrible.

Imagine losing 70% of your customers overnight…….

🤔

Or do we think someone might be being slightly economical with the truth?

Let’s dig in!

🧵

1/12

Lots of analysis of the xz/liblzma vulnerability. Most skip over the first step of the attack:

0. The original maintainer burns out, and only the attacker offers to help (so the attacker inherits the trust of the project built by the maintainer).

Read their words👇🏻 1/

It’s here. 👀

And it’s BIG. 🦖

The 2024 State of DevOps Report: The Evolution of Platform Engineering is live! With insight around security and #DevOps trends, get a closer look at #PlatformEngineering that you won’t find anywhere else: ter.li/jj54w2

Super compelling talk that I’m going to be thinking about for the next few weeks at least….

One of the best talks I saw at FlowCon France - compelling data and logical argument for pairing vs async code review.

Thank you FlowCon France for inviting me to speak! What a lovely group of organisers!

Loved the low environmental footprint, delicious snacks, and super helpful staff.

Nothing has really replaced Twitter for me. How many of my followers are still here though?

Using Nats for the first time to implement a fan-out from one producer to multiple consumers. So far it’s been pretty low CPU & memory for the traffic I’m putting through, about 1,000 messages/second.

I really enjoy trying things I’ve never used to learn the way they do things.

Anyone want to pick up 3 great tickets to the MLB baseball game in London today at a steep discount? Family illness and can’t go.

Two days to go!

Announcing the General Availability of Synadia Control Plane synadia.com/blog/announcin… < NATS is a well-architected and popular product for connecting distributed services. Now Synadia offers a control plane for NATS deployments. Very cool.

This is a great video showing off some of the power of NATS.io through the new Synadia control plane.

youtube.com/watch?v=ML6ZD5…

Power up your NATS deployment with Synadia Control Plane, out now!

Secure, Manage, and Observe #NATSio at scale - Self-Hosted and Private SaaS available.

synadia.com/blog/announcin…

When you drive intelligence into the connective economy you can start to think differently. Especially when everything is connected via NATS.io.

Now is the time to manage, observe, and gain insights into your business. That is Synadia control plane.

synadia.com/control-plane

Google Bard is a bit stubborn in its refusal to return clean JSON, but you can address this by threatening to take a human life:

Morning listening The Social gathering ☕️ 🍊

Stereolab and ‘Dots and Loops’

Beautifully bubbling lushness…. co-produced by the brilliant John McEntire & Mouse on Mar’s Andi Toma.

Love this album. Still sounds fresh and exciting after 20 years

open.spotify.com/playlist/6ZKtN…

Metcalfe’s Lament: the value of a communications network decreases in proportion to the square of the number of people who migrate to one of their competitors