{"id":311,"date":"2021-08-31T14:40:03","date_gmt":"2021-08-31T14:40:03","guid":{"rendered":"https:\/\/fde.cat\/?p=311"},"modified":"2021-08-31T14:40:03","modified_gmt":"2021-08-31T14:40:03","slug":"sre-weekly-issue-271","status":"publish","type":"post","link":"https:\/\/fde.cat\/index.php\/2021\/08\/31\/sre-weekly-issue-271\/","title":{"rendered":"SRE Weekly Issue #271"},"content":{"rendered":"

View on sreweekly.com<\/a><\/p>\n

\n

A message from our sponsor, StackHawk:<\/h2>\n

Join StackHawk on Tuesday, May 25 for a hands-on authenticated security testing workshop. Follow along as we walk through three common authentication scenarios step-by-step.<\/p>\n

Register:
\nhttp:\/\/sthwk.com\/auth-workshop<\/a><\/p>\n<\/div>\n

Articles<\/h2>\n
\n
Naming names in incident writeups<\/a><\/div>\n
\n

Should you keep things anonymous (\u201can engineer\u201d), or should you say exactly who did what? Here\u2019s a solid argument for the latter.<\/p>\n

Lorin Hochstein<\/p>\n<\/div>\n<\/div>\n

\n
How Systems Complexity Reduces Uptime<\/a><\/div>\n
\n

This article explores the downsides to a design composed of independent parts such as with microservices.<\/p>\n

Ephraim Baron<\/p>\n<\/div>\n<\/div>\n

\n
User Simulation for Rapid Outage Mitigation <\/a><\/div>\n
\n

Uber designed a tool they call Blackbox to perform simulated user requests and measure availability. I was struck by the candid discussion of complexity \u2014 no one person can understand how all of Uber\u2019s microservices go together.<\/p>\n

Carissa Blossom \u2014 Uber<\/p>\n<\/div>\n<\/div>\n

\n
Nobl9 Makes SLO Specification Open Source<\/a><\/div>\n
\n

They\u2019ve made a YAML specification and validator for expressing SLOs in a machine-readable format.<\/p>\n

Mike Vizard \u2014 Devops.com<\/p>\n<\/div>\n<\/div>\n

\n
What is Observability<\/a><\/div>\n
\n

A new spin: this one makes the distinction between \u201cexperimental tools\u201d that affect the state of the system, and \u201cobservability tools\u201d that are read-only.<\/p>\n

Brendan Gregg<\/p>\n<\/div>\n<\/div>\n

\n
The Incident Review: 4 Odd Incidents Caused by Animals<\/a><\/div>\n
\n

\u201cContributing factors: moose and squirrel.\u201d<\/p>\n

JJ Tang \u2014 Rootly<\/p>\n<\/div>\n<\/div>\n

\n
When Debuggers Lie<\/a><\/div>\n
\n

Every once in awhile, I need to pull out gdb. In times like those, it\u2019s useful to have this kind of thing floating around in the back of my mind.<\/p>\n

Brendon Scheinman \u2014 okcupid<\/p>\n<\/div>\n<\/div>\n

Outages<\/h2>\n

Slack<\/a>
\nColonial Pipeline<\/a><\/p>\n

The same major US oil pipeline mentioned here last week is still having network issues.<\/p>\n

Binance and Coinbase<\/a>
\nYouTube<\/a>
\nSabre<\/a><\/p>\n

Sabre is a backend service provider used by a lot of airlines.<\/p>\n

Azure web portal<\/a><\/p>\n

There\u2019s an interesting followup post about a DNS issue.<\/p>\n

SRE WEEKLY<\/p>\n","protected":false},"excerpt":{"rendered":"

View on sreweekly.com A message from our sponsor, StackHawk: Join StackHawk on Tuesday, May 25 for a hands-on authenticated security testing workshop. Follow along as we walk through three common authentication scenarios step-by-step. Register: http:\/\/sthwk.com\/auth-workshop Articles Naming names in incident writeups Should you keep things anonymous (\u201can engineer\u201d), or should you say exactly who did… Continue reading SRE Weekly Issue #271<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"spay_email":"","footnotes":""},"categories":[8],"tags":[],"class_list":["post-311","post","type-post","status-publish","format-standard","hentry","category-sre","entry"],"jetpack_featured_media_url":"","jetpack-related-posts":[{"id":303,"url":"https:\/\/fde.cat\/index.php\/2021\/08\/31\/sre-weekly-issue-268\/","url_meta":{"origin":311,"position":0},"title":"SRE Weekly Issue #268","date":"August 31, 2021","format":false,"excerpt":"View on sreweekly.com A message from our sponsor, StackHawk: Join StackHawk Tuesday May 4 at 9 am PT for a hands-on technical workshop! By the end of the session, you will have three types of security testing running in your GitHub pipeline. Register: http:\/\/sthwk.com\/technical-workshop Articles Manageable On-Call for Companies without\u2026","rel":"","context":"In "SRE"","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":350,"url":"https:\/\/fde.cat\/index.php\/2021\/08\/31\/sre-weekly-issue-284\/","url_meta":{"origin":311,"position":1},"title":"SRE Weekly Issue #284","date":"August 31, 2021","format":false,"excerpt":"View on sreweekly.com Like last week, I prepared this week\u2019s issue in advance, so no Outages section.\u00a0 Have a great week! A message from our sponsor, StackHawk: Trying to automate application and API security testing? See how StackHawk and Burp Suite Enterprise stack up: https:\/\/sthwk.com\/burp-enterprise Articles Alerting on SLOs like\u2026","rel":"","context":"In "SRE"","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":255,"url":"https:\/\/fde.cat\/index.php\/2021\/08\/31\/sre-weekly-issue-252\/","url_meta":{"origin":311,"position":2},"title":"SRE Weekly Issue #252","date":"August 31, 2021","format":false,"excerpt":"View on sreweekly.com A message from our sponsor, StackHawk: Interested in how you can automate application security testing with GitHub Actions? Check out this on demand webinar from StackHawk and Snyk and see how simple it is to get started. https:\/\/sthwk.com\/stackhawk-snyk Articles Building On-Call Culture at GitHub Their on-call started\u2026","rel":"","context":"In "SRE"","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":254,"url":"https:\/\/fde.cat\/index.php\/2021\/08\/31\/sre-weekly-issue-253\/","url_meta":{"origin":311,"position":3},"title":"SRE Weekly Issue #253","date":"August 31, 2021","format":false,"excerpt":"View on sreweekly.com A message from our sponsor, StackHawk: How do you know if your GraphQL API is secure? Watch StackHawk CSO Scott Gerlach walk through how to run application security tests for GraphQL-backed apps. http:\/\/sthwk.com\/graphql-webinar Articles May 30 SSL incident TLS can be such a headache. This was an\u2026","rel":"","context":"In "SRE"","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":269,"url":"https:\/\/fde.cat\/index.php\/2021\/08\/31\/sre-weekly-issue-257\/","url_meta":{"origin":311,"position":4},"title":"SRE Weekly Issue #257","date":"August 31, 2021","format":false,"excerpt":"View on sreweekly.com A message from our sponsor, StackHawk: Keeping your APIs secure requires thoughtful design and testing. Learn how to protect your REST, SOAP and GraphQL APIs from security vulnerabilities with StackHawk http:\/\/sthwk.com\/api-protection Articles Sometimes alerts have inobvious reasons for existing This one really got me thinking. Make sure\u2026","rel":"","context":"In "SRE"","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":327,"url":"https:\/\/fde.cat\/index.php\/2021\/08\/31\/sre-weekly-issue-277\/","url_meta":{"origin":311,"position":5},"title":"SRE Weekly Issue #277","date":"August 31, 2021","format":false,"excerpt":"View on sreweekly.com A message from our sponsor, StackHawk: Planelty saved weeks of work by implementing StackHawk instead of building an internal ZAP service. See how: https:\/\/sthwk.com\/planetly-stackhawk Articles FINRA Orders Record Financial Penalties Against Robinhood Financial LLC Remember all those Robinhood outages? The US financial regulatory agency is making Robinhood\u2026","rel":"","context":"In "SRE"","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"_links":{"self":[{"href":"https:\/\/fde.cat\/index.php\/wp-json\/wp\/v2\/posts\/311","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fde.cat\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fde.cat\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fde.cat\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fde.cat\/index.php\/wp-json\/wp\/v2\/comments?post=311"}],"version-history":[{"count":1,"href":"https:\/\/fde.cat\/index.php\/wp-json\/wp\/v2\/posts\/311\/revisions"}],"predecessor-version":[{"id":399,"href":"https:\/\/fde.cat\/index.php\/wp-json\/wp\/v2\/posts\/311\/revisions\/399"}],"wp:attachment":[{"href":"https:\/\/fde.cat\/index.php\/wp-json\/wp\/v2\/media?parent=311"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fde.cat\/index.php\/wp-json\/wp\/v2\/categories?post=311"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fde.cat\/index.php\/wp-json\/wp\/v2\/tags?post=311"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}