ericalexander0

Yes. Why? It streamlines the process and improves results.

Manager schedules are more about bringing order to chaos. It's constant context switching that prevents entering a flow state. It attracts those who are motivates by vice over virtue. What their title or comp is. Not what they work on, or who they work with.

http://paulgraham.com/makersschedule.html

Checked your spf and dmarc settings?

Books: The Five Dysfunctions of a Team & Elegant Puzzle.

You sound conflicted between shipping the quickest way possible, and your sense of pride in craftsmanship.

You're not alone. It's a big reason why time based releases are popular. It's why eXtreme Programming (XP) became a thing.

Given enough time, every engineer would ship the most exquisite solution; problem is, their competitor shipped something good enough long ago OR that exquisite solution isn't what the customer wanted.

Release early, release often.

Read Influence: The Psychology of Persuasion. First you'll have to learn to compel customers to talk with you, then it's all about becoming comfortable with rejection, and grinding out the numbers game.

“Tell me how you measure me and I will tell you how I will behave. If you measure me in an illogical way… do not complain about illogical behavior…” - Eli Goldratt

It's more likely a management problem, with managers who've fallen into the Peter Drucker "Activity Trap".

It's hard to have an effective debate without level setting.

A basic understanding of how we're influenced. Books that come to mind are:Influence: The Psychology of Persuasion, Thinking Fast and Thinking Slow, and The Design of Everyday Things.

After accepting we can be influenced, then we need to understand real world examples of nefarious influence through social media and adtech. The Senate Intelligence Committee report on the 2016 election comes to mind.

So if we can be influenced, and if there's evidence our elections have been influenced; then we need to question if China is a threat, through Tik Tok.

Check out Exercism

https://exercism.org/

How would a hot war benefit China? Does a tall tree not catch all the wind?

OWASP cheat sheet on password storage. Can be used for API key storage.

https://cheatsheetseries.owasp.org/cheatsheets/Password_Stor...

Cool, but how did they measure the success of the changes? I expected to read something along the lines of DORA key metrics.

Getting the right people on the bus is only one component. See Jim Collins' map for the others.

https://www.jimcollins.com/concepts.html

Many books come to mind here. No rules rules, measure what matters, hackers and painters, and good to great.

Some companies will have the luxury to avoid a race to the bottom, driven by the addiction to quarterly profits. The rest will get to read about their luxuries, will they endure a sisyphean existence.

Welcome to management. At best you'll be making directionally correct decisions. Don't wait for perfect clarity. It's unlikely to happen, and it's probably too late if it does. You know what to do here. Go do it. Then go read The 5 Dysfunctions of a Team.

These CEO mandates are curiously similar, yet so ill-concieved.They sure feel more like political talking points.

Likely has more to do with the looming "debt spiral", and not productivity.

https://news.bloomberglaw.com/bankruptcy-law/global-real-est...

I work at a company with a presence in AWS, GCP, Azure, Aliyun, and global data centers we operate.

I've learned, yes, you can save money - but only if you're good at forecasting workload and operational costs out 5 years.

I suspect most rushing into the move have inaccurate mental models around true costs related to things like a 24/7/365 NOC and rolling their own IAM to solve SOC2 requirements.

Then there's the recruiting problem. Many engineers want to stay sharp on the latest and greatest in the cloud. Few will want to work on your klunky MVP built in house.

It's no coincidence. Jobs was influenced by quality philosophers like Toyoda, Deming, etc.

https://m.youtube.com/watch?v=kib6uXQsxBA

Who learned the Toyota/Toyoda way from Sakichi Toyoda.

https://www.toyota-industries.com/company/history/toyoda_sak...

Does perception matter? The perception of both US and Chinese capability in the eyes of their citizens, and the world? The perception that a cold war could turn to a hot war?

Reminds me of Westrum types. Every organization is a snowflake. There is no one type fits all solution.

https://cloud.google.com/architecture/devops/devops-culture-...

Pfsense comes to mind. All solutions will need to be trusted as a root CA, by all devices routed through them, to filter URL patterns. No CA trust needed to do DNS or TLS setup filtering, but those options can only filter the hostname.

Tried it about 4 years ago. Didn't like it. Chose Keycloak and have been using since.

Do successful people manifest luck, or do they have a higher return on luck?

https://www.jimcollins.com/concepts/return-on-luck.html

“Tell me how you measure me and I will tell you how I will behave. If you measure me in an illogical way… do not complain about illogical behavior…” -Eli Goldratt

The move to microservices is often more about scaling change management when an organization grows from tens to hundreds of engineers.

Change management becomes the bottleneck when organizations exceed Dunbar's Number, and a "reverse Conway maneuver" is needed to counter excessive cost of coordination.

https://cloud.google.com/architecture/devops/devops-tech-arc...

Progressing on the important things, not just the urgent things.

Some good links here to engineering org blogs and handbooks.

https://unmesh.dev/awesome-engineering

>freely usable by unregistered users

Why not require registration and in turn authentication? Easier to rate limit with authentication.

Having built security programs at multiple companies, I can tell you it's not something as easy as one person cramming content for a day and then implementing with ease.

It's also unclear what outcome the business is looking for. If I had to guess, a big contract requires "security" and management wants to check that box the cheapest way possible.

If it's about first steps to improving security posture, and assuming you have a SAAS offering - then the first thing I'd do is start a bug bounty with hackerone or bugcrowd. It's the quickest way to both establish a feedback loop on security state, while also introducing a forcing function to prioritize fixing defects.