214 karma · joined February 6, 2019
Why not DNS? Seems to check all the boxes you're looking for.
Many prominent Colorado ski resorts may face the same fate in the near future:
https://denvergazette.com/premium/drought-threatens-future-o...
Macro conditions don't guarantee one way or another for single companies. There's always signs of financial stress internally. Keep an eye out and you'll see them, if there.
There's plenty of real world scenarios that could have taken out that data center and the Twitter engineering team would have been scrambling to fix, just the same.
I read somewhere once that v1 of chaos monkey was the Netflix CEO randomly pulling cables in a data center to prove the point that systems needed rugged designs. Not all too different.
“Tell me how you will measure me, and then I will tell you how I will behave. If you measure me in an illogical way, don’t complain about illogical behavior.” – Eli Goldratt
This phenomenon was likely first identified by Deming. His Red Bead Experiment is infamous in demonstrating.
https://deming.org/explore/red-bead-experiment/
There's a lot of good research and advice from DORA on what to measure and improve.
https://cloud.google.com/blog/products/devops-sre/using-the-...
AI is the second wave of software eating the world. The first wave improved knowledge sharing and mechanized business processes. That wave replaced many jobs and produced funny t+shirts like "I could replace you with a bash script".
The second AI wave will replace low hanging fruit pattern matching jobs, when there's enough data to train on. If your job is to pattern match input, then it's likely ripe for AI replacement. Think jobs with analyst in their title. Compliance Analyst. SOC Analyst.
Any job that requires critical thinking, has limited training data, or has low tolerance for failure - they're not going away anytime soon. Maybe augmented with AI tools, but not replaced. Jobs like Security Researcher or Security Incident Handler.
Best example I can give is the lore of SpaceX's spending policy. Every purchase was authorized, if it could get the company to Mars faster. True? IDK, I wasn't there, but it's the type of clarity most companies struggle to define. There is no DevOps without that clarity.
Pentests are point in time assessments. Usually with one to two testers, with limited scopes of expertise.
Bug bounties can bring in hundreds of testers with a wide breadth of expertise that continuously test.
The current system is driven by ad revenue, but when the customers are advertisers, then the user experience sucks. Why would I want to wade through search results full of ads when OpenAI, Bard, etc can answer my question in seconds.
How does the landscape change? The cheap low effort content farm business model is dead.
I hate to say it, but security/compliance tends to cargo cult. They implement what's accepted by whatever compliance framework they need to achieve. PCI, FedRAMP, SOX, SOC, CIS, etc, etc.
Engineers want to break things down to components and understand why each component is required. AKA thinking from first principles.
Mixing the two is like oil and water. Security and compliance don't have in-depth explanations for why they need to do something, they just need to check a box, and they know how it's most often checked. They know "nobody got fired for buying Sophos/Windows/AD/etc". They can't explain it from first principles, nor do they want to take the risk of going outside of known solutions.
So how do you negotiate? The box they're trying to check is likely well documented. Ask to see the documentation for the requirement(s). From there you can propose alternate solutions that meet those requirements. Try to find examples of your proposal being accepted, so you don't run into the "nobody got fired for buying x".
Means js is better than _insert_other_language_? Nope. There's always tradeoffs. The best solutions seek to manage essential tradeoffs, while ignoring irrelevant ideology.