Open-sourcing Mariana Trench: Analyzing Android and Java app security in depth

We’re sharing details about Mariana Trench (MT), a tool we use to spot and prevent security and privacy bugs in Android and Java applications. As part of our effort to help scale security through building automation, we recently open-sourced MT to support security engineers at Facebook and across the industry.  This post is the third… Continue reading Open-sourcing Mariana Trench: Analyzing Android and Java app security in depth

Published
Categorized as Technology

Switch It Up!

It is vital that a microservice striving for high availability have at its disposal several choices on how to rollback changes when unforeseen production issues occur. A very interesting article comes to mind from O’Reilly, Generic Mitigations, where the theme is to restore service functionality FIRST and FAST — and THEN root cause the real fix as… Continue reading Switch It Up!

Published
Categorized as Technology

2Africa Pearls subsea cable connects Africa, Europe, and Asia to bring affordable, high-speed internet to 3 billion people

Facebook invests in subsea cables as part of our continued efforts to build the infrastructure that carries internet traffic and helps bring more people online to a faster internet. Today, we are thrilled to announce, along with regional and global partners, a new segment of subsea cable called 2Africa Pearls, which connects three continents —… Continue reading 2Africa Pearls subsea cable connects Africa, Europe, and Asia to bring affordable, high-speed internet to 3 billion people

Published
Categorized as Technology

SRE Weekly Issue #289

View on sreweekly.com A message from our sponsor, StackHawk: Semgrep and StackHawk are showing you what’s new with automated security testing on September 30. Grab your spot: https://sthwk.com/whats-new-webinar Articles How SREs are unique in their approach to work Here are some things that make SREs a unique breed in software work: The one about Scrum… Continue reading SRE Weekly Issue #289

Published
Categorized as SRE

SRE Weekly Issue #288

View on sreweekly.com A message from our sponsor, StackHawk: Want to see what’s new with automated security tooling? Tune in on September 30 to see how StackHawk and Semgrep are making it possible to embed security testing in CI/CD. https://sthwk.com/whats-new-webinar Articles Tammy Bryant Butow on SRE Apprentices Faced with a difficult hiring market for SREs,… Continue reading SRE Weekly Issue #288

Published
Categorized as SRE

Superpack: Pushing the limits of compression in Facebook’s mobile apps

Managing app size at Facebook is a unique challenge: Every day, developers check in large volumes of code, and each line of code translates into additional bits in the apps that people ultimately download onto their phones. Left unchecked, this added code would make the app bigger and bigger until eventually the time it takes… Continue reading Superpack: Pushing the limits of compression in Facebook’s mobile apps

Published
Categorized as Technology

SRE Weekly Issue #287

View on sreweekly.com A message from our sponsor, StackHawk: Trying to figure out how to keep your APIs secure? You’re not the only one. See how DataRobot is automating API security testing with StackHawk. https://sthwk.com/DataRobot Articles Industry Interviews: Colm Doyle, Incident Commander at Slack Lots of details about how Slack does incident response in this… Continue reading SRE Weekly Issue #287

Published
Categorized as SRE

How WhatsApp is enabling end-to-end encrypted backups

For years, in order to safeguard the privacy of people’s messages, WhatsApp has provided end-to-end encryption by default ​​so messages can be seen only by the sender and recipient, and no one in between. Now, we’re planning to give people the option to protect their WhatsApp backups using end-to-end encryption as well. People can already… Continue reading How WhatsApp is enabling end-to-end encrypted backups

Published
Categorized as Technology

SRE Weekly Issue #286

View on sreweekly.com A message from our sponsor, StackHawk: Trying to scale AppSec across engingeering is no joke. Check out the 3 main reasons developers struggle with AppSec and how to make it better. https://sthwk.com/3-reasons Articles Kill It With Fire This is a review of Marianne Bellotti’s Kill It With Fire a book about modernizing… Continue reading SRE Weekly Issue #286

Published
Categorized as SRE

CacheLib, Facebook’s open source caching engine for web-scale services

Caching plays an important role in helping people access their information efficiently. For example, when an email app loads, it temporarily caches some messages, so the user can refresh the page without the app retrieving the same messages. However, large-scale caching has long been a complex engineering challenge. Companies must balance the fast experience people… Continue reading CacheLib, Facebook’s open source caching engine for web-scale services

Published
Categorized as Technology