Makura no Soshi

More stuff on cloud and service architecture.

• A dissection of our favorite folk architecture
  I’m fascinated by the lore and mystery behind microservices. As a concept, microservices feels like one of the most interesting folk architectures of the modern era. It’s useful enough to be applied widely across different usage patterns and also vague enough to mean many different things.
• DevOps vs SRE: delayed coverage of the dumbest war
  I’m not personally pissed off by the google SRE book, actually, just a little bemused at how legitimately unaware they seem to be about … anything else that the industry has been doing over the past 10 years.
• Stack Overflow: A Technical Deconstruction
  One of the reasons I love working at Stack Overflow is we’re allowed encouraged to talk about almost anything out in the open.
• The Children’s Illustrated Guide to Kubernetes
  Introducing Phippy, an intrepid little PHP app, and her journey to Kubernetes.
• So You Wanna Go On-prem Do Ya
  If you run a successful SaaS platform, at some point someone is going to come to you with the question: can I run it myself? If you’re considering offering a private version of your SaaS, this post might be for you.
• PCI Compliance in the Public IaaS Cloud: How I Did It
  Over the past few years, I have heard many folks assert that one can be a PCI-compliant merchant using public IaaS cloud, and I have heard just as many state that it’s not possible. In retrospect, I have found most of them – including myself – to be misinformed.
• Video, Keynote NDC Sydney 2016: “If I knew then what I know now…” – Scott Hanselman
  Do you know there are actually more Javascript frameworks than there are apps that use Javascript frameworks?

• What I learned as a hired consultant to autodidact physicists
  It began after I started as a teaching assistant at the department of physics. The first note was a classic – it proved Albert Einstein wrong. The second one solved the problem of quantum mechanics by dividing several equations through zero, a feat that supposedly explained non-determinism.
• How to Recruit – Rands in Repose
  Recruiting and engineering must have a symbolic force-multiple relationship because the work they do together – the work of building a healthy and productive team – defines the success of your team and your company.
• It’s Not Just Standing Up: Patterns for Daily Standup Meetings
  Daily stand-up meetings have become a common ritual of many teams, especially in Agile software development. However, there are many subtle details that distinguish effective stand-ups and a waste of time.
• The Ultimate Guide to Remote Standups
  Remote companies have a unique opportunity to create optimal work environments for their their employees. With a few tweaks, the standup format helps remote teams get more done, faster.
• Meditations Redux
  The company I helped start, DefenseStorm, just celebrated its second year […] I’m posting the lessons I’ve learned because I think they might be useful to others.
• Being A Developer After 40 — Free Code Camp
  Hi everyone, I am a forty-two years old self-taught developer, and this is my story.

Some food for political thought, ranging from the IT perspective to the global economy.

• What Amazon Learned From Microsoft
  SaaS is the new proprietary. Truly the AWS Console is this generation’s Visual Studio.
• What is Google Up To?
  This has led us to a curious but reasoned inference, that Google is not always acting as a business in the conventional capitalist sense. The company’s motives at times appear to have a broader agenda, better described in social, even artistic terms, rather than exclusively business terms.
• A lesson in social engineering: president debates
  There is no debate, there is only social engineering.
• America Has Never Been So Ripe for Tyranny
  The freedom in that democracy has to be experienced to be believed — with shame and privilege in particular emerging over time as anathema. But it is inherently unstable. […] And it is when a democracy has ripened as fully as this, Plato argues, that a would-be tyrant will often seize his moment.
• How American Politics Went Insane
  Chaos syndrome is a chronic decline in the political system’s capacity for self-organization. It happened gradually—and until the U.S. figures out how to treat the problem, it will only get worse.
• The end of capitalism has begun
  Capitalism, it turns out, will not be abolished by forced-march techniques. It will be abolished by creating something more dynamic that exists, at first, almost unseen within the old system, but which will break through, reshaping the economy around new values and behaviours.
• The Age of Disorder
  Authoritarianism, mercantilism, and nationalism are beginning to replace democracy, capitalism, and internationalism.

Thoughts and recipes to build and run systems and services.

• How to build stable systems
  The first decision is easily the most important. It is one of ideology: the developers are in control of the software. Not the other way around. Managers are not in control of the software. Product Owners are not in control of the software. Developers are.
• The 15-point DevOps Check List
  The checklist could help you proceed with setting up a DevOps culture but don’t consider it as a unique way to proceed with your organization transformation.
• 10 Philosophies for Engineers
  In this post and podcast episode, I convey some loose philosophies about modern software engineering. These are strong opinions weakly held. I welcome debate and discussion.
• 3 Reasons AWS Lambda Is Not Ready for Prime Time
  When I first sat down to write my microservice using Lambda, I really wanted it to be the greatest thing since sliced bread. […] Sadly, it was too good to be true.
• Microservices & Einradfahren
  Zu meiner großen Enttäuschung muss ich nun feststellen, dass die Leute in der IT, bzw. Developer wie sie heute genannt werden, mit den gleichen Denkmustern arbeiten wie die Business Kasper.
• Creating a Microservice? Answer these 10 Questions First
  Microservices appear simple to build on the surface, but there’s more to creating them than just launching some code running in containers and making HTTP requests between them.

A failure, a success story, and several thoughts on system design.

• Inside the sad, expensive failure of Google+
  Create a social network or risk everything.
• Jetbrains: The unicorn Silicon Valley doesn’t like to talk about
  The reason why Jetbrains has such little competition is because few startups and programmers are willing to learn and embrace non-sexy tech.
• Why I Strive to be a 0.1x Engineer
  Given the cost of maintaining everything we build, it would literally be better for us to do 10% the work and sit around doing nothing for the rest of our time, if we could figure out the right 10% to work on.
• Boring Systems Build Badass Businesses
  Build the most minimal solution you possibly can. See if customer’s like it, use it, and will pay enough for it. Only then build it into a full solution.
• Logging v. instrumentation
  Logging and instrumentation are two perennially hot topics in software development generally, and seem to be enjoying a certain renaissance in the context of microservices particularly. And I see quite a lot of confusion on the topic.
• How to build stable systems — Medium
  The first decision is easily the most important. It is one of ideology: the developers are in control of the software. Not the other way around. Managers are not in control of the software. Product Owners are not in control of the software. Developers are.

Politik & Menschen

• Der dunkle Bruder des Feedback, Ralf Westphal
  Der dunkle Bruder Hilferuf muss aus dem Schatten des Feedback heraustreten. Denn alles, was nicht anerkannt wird, stiftet Unruhe – und das, ohne dass man womöglich genau sagen könnte, woher die kommt.
• Die Webregierung, Teil I – Der Tod des Open Web, mspro
  Ich persönlich habe für mich das Open Web bereits abgehakt. Es war eine gute Idee. So wie der Kommunismus eigentlich eine gute Idee war.
• Von den Quellen des Hasses, Benjamin Birkenhake
  Heute bin ich mit irgendwelchen Regionalzügen über irgendwelche Dörfer gefahren und in den Zügen sassen die Menschen, die in diesen Dörfern leben.
• Untangling the Tale of Ada Lovelace, Stephen Wolfram
  Ada Lovelace was born 200 years ago today. To some she is a great hero in the history of computing; to others an overestimated minor figure. I’ve been curious for a long time what the real story is.
• Gamers Mimic a Lot of the Tactics of the Religious Right, Jef Rouner
  Criticism of the status quo, no matter how mild, is felt like an attack on a person’s morality. […] Players who are perfectly happy with a white, male-centric, violent, heteronormative status quo in gaming feel judged for that happiness when marginalized people and their allies speak up about how it affects them.
• How SysAdmins Devalue Themselves, Tom Limoncelli
  If we all make a concerted effort, then all sysadmins, as a community, can make sure that the role of system administrator stays devalued for a very long time.

Security & Crypto edition

• On the Juniper backdoor, Matthew Green
  And while every reasonable person knows you can’t just drop “passive decryption vulnerability” and expect the world to go on with its business, this is exactly what Juniper tried to do. Since they weren’t talking about it, it fell to software experts to try to work out what was happening by looking carefully at firmware released by the company.
• Why I don’t care that Dell installs Rogue Certificates On Laptops, Tom Limoncelli
  Every new machine should be wiped and reloaded with your organization’s “standard build”. Having a “standard build” is one of the foundational pieces of infrastructure that your organization is responsible for. It is so fundamental that not having this kind of infrastructure is negligent.
• The Moral Character of Cryptographic Work, Phillip Rogaway
  As computer scientists and cryptographers, we are twice culpable when it comes to mass surveillance: computer science created the technologies that underlie our communications infrastructure, and that are now turning it into an apparatus for surveillance and control; while cryptography contains within it the underused potential to redirect this tragic turn.
• The IPv6 Numeric IP Format is a Serious Usability Problem, Adam Ierymenko
  While the IPv6 protocol itself is fine, its original designers made some truly bizarre decisions around how to represent numeric addresses.
• How to C (as of 2016), Matt Stancliff
  The first rule of C is don’t write C if you can avoid it. If you must write in C, you should follow modern rules.
• Mozilla SSL Configuration Generator
  The goal of this document is to help operational teams with the configuration of TLS on servers.

A few good articles on cloud development and operations.

• Sort out deployment first, Lars Wirzenius
  It is tempting to start a new project with the interesting bits, but it’s often a mistake. One of the first steps in a new project should be to sort out deployment: getting the software installed and configured so it can be used.
• 5 AWS mistakes you should avoid, Michael Wittig
  Useful to evaluate your own AWS web application.
• 12 Fractured Apps, Kelsey Hightower
  Once Docker hit the scene the benefits of the 12 Factor App (12FA) really started to shine. […] Unfortunately legacy applications, including the soon-to-be-legacy application you are working on right now, have many shortcomings, especially around the startup process.
• Moving a team from Scala to Golang, Jim Plush
  You can jump into any Go project and know immediately what it’s doing. Do I miss immutable types and some of the great features of Scala? Sure do, but I think the maintainability side of the story is too great to overlook with Go.
• Ansible 2.0 Has Arrived
  After a year of work, we are extremely proud to announce that Ansible 2.0 (“Over the Hills and Far Away”) has been released and is now generally available. This looks like a big step forward. Finally Ansible gets a usable parsing/error reporting and with the new execution strategies you no longer have to update all hosts in lockstep.
• What’s in a Name?, Geoff Huston (ISP Column Dec 2015)
  What’s the difference between .local and .here? Or between .onion and .apple?