Southwest Airlines: ‘Shameful’ Technical Debt Bites Back - DevOps.com

The moral of the story: I like criticism. It makes you strong.

The débâcle of canceled flights was caused by decades of #TechnicalDebt. That’s the analysis of @Columbia prof @Zeynep. A lack of scalability in #SkySolver, $LUV’s crew sched. system, led to days of paralysis.

At @TechstrongGroup’s @DevOpsDotCom: https://t.co/y6XcUbuNMi #DevOps

— @Richi 🤓 Jennings (@RiCHi) January 5, 2023

PyTorch supply chain attack: Dependency confusion burns DevOps - ReversingLabs

Flaming security posture: A classic dependency confusion attack revealed itself last week. The PyTorch open source software supply chain was compromised by a hacker publishing a malicious torchtriton clone on PyPI.

3/ It’s proof, once again, that #DevOps needs to get serious about mitigation.

In this week’s #SSBlogwatch we have nothing to lose but our chains.

For @ReversingLabs’ @SecuredSoftware: https://t.co/AJixr4a3zJ

— @Richi 🤓 Jennings (@RiCHi) January 4, 2023

‘We Must Ban TikTok!’ — Senate, House, FCC Agree - Security Boulevard

GOP: No FYP for U
TikTok’s days are numbered in the U.S.—if the GOP has its way. Because the app is “a sophisticated surveillance tool” that embodies China’s “techno-totalitarian control,” they say.

3/ Can you feel which way the wind is blowing?

The answer, my friend, is in today’s #SBBlogwatch. At @TechstrongGroup’s @SecurityBlvd: https://t.co/muZCwiiOCS

— @Richi 🤓 Jennings (@RiCHi) January 3, 2023

AWS Saves Ukraine’s Data | WPF ‘is not Dead’ (yet) | Devs Quit for Cash - DevOps.com

The moral of the story: Everybody wants to be famous—but nobody wants to do the work

In this week’s #TheLongView:
1⃣ @AWSCloud #S3 is keeping #Ukraine’s data safe from #Russia,
2⃣ we ask if #WindowsPresentationFoundation is dead, and
3⃣ #developers tell us why they switch jobs.

At @TechstrongGroup’s @DevOpsDotCom: https://t.co/O7pQv8v80r #DevOps

— @Richi 🤓 Jennings (@RiCHi) December 21, 2022

DraftKings fantasy? How YOU can prevent credential stuffing attacks - ReversingLabs

I’ll choose a mask to look like you: There’s been a huge uptick in a type of low-effort hacking, where bad actors crack accounts of people who reuse passwords. They simply feed off of data from previous credential breaches.

3/ Prevented how? By checking user passwords against public databases of leaked #credentials.

In this week’s #SSBlogwatch we urge dev teams to do more.

For @ReversingLabs’ @SecuredSoftware: https://t.co/djeNopsos6 #DevOps

— @Richi 🤓 Jennings (@RiCHi) December 20, 2022