Five security principles for billions of messages across Meta’s apps

At Meta, our messaging apps help billions of people around the world stay connected to those who matter most to them. This scale brings potential threats from criminals and hackers, so we have a responsibility to keep people and their data safe. We’re sharing a set of principles to ensure that security is central to… Continue reading Five security principles for billions of messages across Meta’s apps

Published
Categorized as Technology

Programming languages endorsed for server-side use at Meta

– Supporting a programming language at Meta is a very careful and deliberate decision. – We’re sharing our internal programming language guidance that helps our engineers and developers choose the best language for their projects. – Rust is the latest addition to Meta’s list of supported server-side languages. At Meta, we use many different programming… Continue reading Programming languages endorsed for server-side use at Meta

Published
Categorized as Technology

It’s time to leave the leap second in the past

The leap second concept was first introduced in 1972 by the International Earth Rotation and Reference Systems Service (IERS) in an attempt to periodically update Coordinated Universal Time (UTC) due to imprecise observed solar time (UT1) and the long-term slowdown in the Earth’s rotation. This periodic adjustment mainly benefits scientists and astronomers as it allows… Continue reading It’s time to leave the leap second in the past

Published
Categorized as Technology

SRE Weekly Issue #331

View on sreweekly.com A message from our sponsor, Rootly: Manage incidents directly from Slack with Rootly 🚒. Automate manual admin tasks like creating incident channel, Jira and Zoom, paging and adding responders, postmortem timeline, setting up reminders, and more. Book a demo (+ get a snazzy Rootly lego set): https://rootly.com/demo/ Articles DisasterCast – A podcast… Continue reading SRE Weekly Issue #331

Published
Categorized as SRE

Using Hermes’s Quicksort to run Doom: A tale of JavaScript exploitation

At Meta, our Bug Bounty program is an important element of our “defense-in-depth” approach to security. Our internal product security teams investigate every bug submission to assess its maximum potential impact so that we can always reward external researchers based on both the bug they found and our further internal research assessment of where else… Continue reading Using Hermes’s Quicksort to run Doom: A tale of JavaScript exploitation

Published
Categorized as Technology

How Meta and the security industry collaborate to secure the internet

Bug hunting is hard and can sometimes go unnoticed across our industry. Building scalable bug detection methods across large codebases and open source libraries is an underappreciated yet critical effort every engineering company has to work through. Because the ideal outcome is that bugs are found and fixed before they are exploited, some of our… Continue reading How Meta and the security industry collaborate to secure the internet

Published
Categorized as Technology

SRE Weekly Issue #330

View on sreweekly.com Thanks for all the well-wishes as I took a sick day last week. I’m feeling much better! A message from our sponsor, Rootly: Manage incidents directly from Slack with Rootly 🚒. Automate manual admin tasks like creating incident channel, Jira and Zoom, paging and adding responders, postmortem timeline, setting up reminders, and… Continue reading SRE Weekly Issue #330

Published
Categorized as SRE

Owl: Distributing content at Meta scale

Being able to distribute large, widely -consumed objects (so-called hot content) efficiently to hosts is becoming increasingly important within Meta’s private cloud. These are commonly distributed content types such as executables, code artifacts, AI models, and search indexes that help enable our software systems. Owl is a new system for high-fanout distribution of large data… Continue reading Owl: Distributing content at Meta scale

Published
Categorized as Technology