Patch Notes #116 — Three Billion and a Nobel

Opening with the somber: the Las Vegas shooting is days old and processing hasn’t finished; the tech-adjacent note, again (#084), is safety-check systems and blood-bank logistics doing quiet essential work. Take care of your people. Onward, because onward is the format. Yahoo (now buried inside Verizon, #087) revised its breach disclosure this week: not 1 billion accounts. ALL of them. THREE billion — every Yahoo account that existed in 2013, the largest breach in history, upgraded via footnote four years later. Breach numbers only ever revise UPWARD; initial disclosure is a floor, never a ceiling (Equifax’s count, #115, has already crept too). Assume the ceiling on day one. ...

October 6, 2017

Patch Notes #115 — The Breach That Should End Breach-as-Usual

Equifax. 143 MILLION Americans — SSNs, birthdates, addresses, the immutable keys to whole identities — exfiltrated from a company most victims never chose to do business with. The failure chain is a full curriculum: a known Apache Struts vulnerability, patch available in MARCH, unpatched through JULY (the WannaCry sermon, #107, re-preached with the entire adult population as congregation); a breach discovered in July and disclosed in SEPTEMBER; executives who sold stock in between (they say unknowingly); a response site that was itself so sketchy that browsers flagged it; and — my personal favorite artifact of the whole disaster — their Argentina portal reportedly secured with admin/admin. You cannot rotate your SSN. The data model of American identity assumes secrets that half the internet now holds. The real fix isn’t Equifax-shaped, it’s architectural: identity systems built on credentials that can be REVOKED. (The Apple-FBI file, #077, keeps gaining appendices.) ...

September 21, 2017

Patch Notes #114 — Buffering at the Bell

Mayweather-McGregor postscript, exactly as #057 prophesied: the pay-per-view infrastructure BUCKLED AGAIN. Showtime’s streams stuttered and 500’d at fight time, the start got delayed for buffering buyers, and a class-action lawsuit about stream quality was filed before the bruises faded. Same failure, different year, bigger check: flat-fee mega-events create vertical demand walls that elastic infrastructure can catch — Mayweather-Pacquiao was 2015, the eclipse was TWO WEEKS AGO (#113, handled fine by NASA), the playbook exists, and PPV economics keep not buying it. The fight itself over-delivered (McGregor was genuinely competitive for nine rounds before the inevitable), and Mayweather retired 50-0, the rarest thing in sports: a system that never once went down in production. ...

September 6, 2017

Patch Notes #113 — Totality

Yesterday I stood in a field in Oregon — the bucket-list flight I’d been saving toward since the streak began — with two conference friends, cardboard glasses, and 200 strangers, and watched the MOON EAT THE SUN. Totality is not a percentage experience — 99% partial is a neat dimming; 100% is a hole in the sky wearing a crown of fire, planets visible at midday, birds going to bed confused, humans involuntarily screaming. The temperature dropped like a deploy going wrong. Two minutes that recalibrated my sense of what “rare event” means. The whole country stopped and looked UP together, which 2017 needed more than any of us admitted. ...

August 22, 2017

Patch Notes #112 — Flash, 1996–2020: An Obituary Foretold

Adobe announced Flash will die in 2020 — an execution date, published three years out, for the technology that WAS the fun internet of my adolescence. Newgrounds, Homestar Runner, every browser game that ruined my GPA, YouTube’s original player: all Flash. It also was a security hellscape (this blog’s archives contain a decade of “patch Flash NOW” by implication), a battery vampire, and the subject of the most consequential product memo of the mobile era — Jobs’ 2010 “Thoughts on Flash,” which everyone called spite and which turned out to be a roadmap. HTML5 won by becoming boring and universal. The deprecation lesson, for the file: platforms don’t die when the replacement is better; they die when the replacement is DEFAULT. And three years of scheduled hospice is a GIFT — the average internal system gets killed by a Friday email. Announce your deprecations like Adobe; migrate like it’s 2019. ...

August 7, 2017

Patch Notes #111 — Number Eight

Federer won Wimbledon. His EIGHTH — most ever for a man there — at nearly 36, without dropping a single set the entire tournament, five years after everyone (me included, quietly) wrote the eulogy. The renaissance is architectural, not magical: he skipped the entire clay season (deliberate load-shedding), rebuilt the backhand that Nadal had exploited for a decade (refactored the known bottleneck), and switched to a bigger racket head years back (accepted a breaking change for long-term throughput). Aging systems don’t have to degrade; they have to be MAINTAINED with intent. Federer is legacy code that got the loving rewrite, and I’m putting him in the Proverbs file next to the Postgres upgrade. ...

July 23, 2017

Patch Notes #110 — Money for Whitepapers

The ICO thing has gone fully vertical and I need to log it mid-mania so future-me can grade the take. Current state of “initial coin offerings”: projects raise tens of millions of dollars in MINUTES by selling tokens against a whitepaper — no product, no revenue, sometimes functionally no team. Bancor pulled in ~$150M in hours. The Ethereum network, where most of this runs, keeps groaning under its own gold rush. The mechanism is genuinely novel (programmable fundraising! global! permissionless!) and the current usage is genuinely unhinged (the 1999 IPO checklist required MORE than a PDF). My on-the-record position: the infrastructure is real, the median project is vapor, and the correction will be biblical — but the correction’s DATE is unknowable, and that gap is where fortunes and frauds both live. Not financial advice; I hold approximately 0.1 nostalgia-Bitcoins from a 2013 experiment. ...

July 8, 2017

Patch Notes #109 — Amazon Buys Groceries, Real Madrid Buy Glory

Amazon announced it’s buying WHOLE FOODS for $13.7 billion, and the strategic shockwave was measurable in real time: every grocery stock on Earth dropped the moment the press release hit — billions in competitor market cap deleted by a PDF. The chess is beautiful and slightly terrifying: 460 refrigerated warehouses in wealthy zip codes, a delivery-density dream, the Go store’s (#096) sensor tech with a live laboratory, and Prime as the loyalty program stitching it all together. Amazon spent 2016 making buying invisible (#096) and is now buying the physical substrate of the most frequent purchase in human life. “Your margin is my opportunity” has entered its produce-aisle era. ...

June 23, 2017

Patch Notes #108 — Apple Points at Reality

WWDC delivered a sleeper hit: ARKIT. Apple’s framework for augmented reality on plain iPhones — world tracking, plane detection, light estimation — shipping to hundreds of millions of devices this fall with, functionally, one import statement. The demos on dev Twitter within 48 HOURS (tape measures, furniture previews, tiny dragons on desks) already outclass everything Google Glass (#004) and most of the VR industry promised. The strategic read: while everyone chased headsets, Apple made the phone in your pocket the largest AR platform on Earth OVERNIGHT, and made every future-headset developer learn THEIR stack first. Platform judo. Alexa did it with speakers (#098); Apple’s doing it with cameras. ...

June 8, 2017

Patch Notes #107 — The Worm That Held Hospitals Hostage

WannaCry happened. A ransomware WORM — self-spreading, no clicks needed — tore through 200,000+ Windows machines across 150 countries in a weekend, encrypting everything and demanding Bitcoin. The UK’s NHS got hit hardest: appointments cancelled, ambulances diverted, HOSPITALS running on paper because of unpatched Windows 7 boxes on flat networks (#047’s segmentation sermon, now with casualties). The exploit, “EternalBlue,” leaked from the NSA’s own stockpile — a government hoarded a vulnerability, lost custody of it, and watched it hit its own health system’s supply chain. Every debate from Apple-vs-FBI (#077) about “keys that only good guys hold” just got its empirical result. ...

May 24, 2017