Patch Notes #096 — The Store With No Checkout

Amazon announced GO this week: a real grocery store, opening in Seattle, with NO CHECKOUT. Walk in, grab things, walk out; cameras and sensors and ML figure out what you took and bill your account. “Just Walk Out technology,” which is either the best product name or the best shoplifting instruction ever printed. The demo video looks like sci-fi; the employee-beta caveats suggest the edge cases (occlusion, shared carts, indecisive shelf-returners) are where the bodies are buried — they always are; the demo is the dream (#034, evergreen). But note the trajectory: Amazon spent a decade making BUYING invisible online (one-click, Dash buttons, Alexa), and now it’s compiling that philosophy into PHYSICAL SPACE. Friction is their sworn enemy in every dimension of reality. ...

December 10, 2016

Patch Notes #095 — The Feed Reckoning

The post-election story consuming tech: FAKE NEWS as a business model. Teenagers in Macedonia ran profitable content farms of invented headlines because the feed pays per engagement and outrage is the highest-yield emotion. Zuck’s initial “crazy idea” dismissal aged badly within DAYS; Facebook and Google both scrambled to cut ad-network access for fake-news sites this fortnight. Here’s the uncomfortable engineering truth the think-pieces circle without landing: nobody wrote if (fake) promote(). They wrote “maximize engagement,” and the optimizer found the exploit, because optimizers ALWAYS find the exploit — that’s what they’re FOR. Tay (#079) learned from trolls in sixteen hours; the feed learned from human nature over a decade. Same bug. Objective functions are wishes made to a very literal genie. ...

November 25, 2016

Patch Notes #094 — The Longest Rain Delay

HAMILTON WON THE BRAZILIAN GP IN THE POURING RAIN. I need it in writing, in this format, in this font: three hours of race time, ended in a wet-weather showcase that was itself a short novel — aquaplaning crashes, multiple red flags, and then a lengthy RAIN DELAY during which, reporting says, Hamilton sat calmly in the garage analyzing telemetry while the team regrouped. Then a restart of pure nerve. Max Verstappen carving through the field like he was driving on dry tarmac. Two Mercedes teammates entered (#093); Hamilton’s title hope survived. Grown adults wept in the grandstands. The F1 season is going to the absolute wire in Abu Dhabi, and I consider the drama HONORED. ...

November 10, 2016

Patch Notes #093 — The Day the DNS Died

Friday, someone turned off the internet’s phone book. A massive DDoS hit Dyn — the managed-DNS provider behind Twitter, Netflix, Reddit, Spotify, GitHub — and for hours, half the household-name web wouldn’t resolve for much of the US. The weapon: MIRAI, a botnet of hacked IoT devices. Security cameras. DVRs. BABY MONITORS. Default passwords, internet-exposed, conscripted by the hundreds of thousands. The #049 prophecy (“IoT will keep this blog in material for a decade”) is ahead of schedule: the S in IoT stands for security, and the things we connected without thinking are now infrastructure-grade artillery pointed at whatever choke point volunteers. ...

October 26, 2016

Patch Notes #092 — Discontinued

Samsung killed the Note 7 today. Not “recalled” — KILLED. Dead product line. The replacement units for the fire-prone phones (#090) ALSO caught fire, including one on an airliner, and after a second recall in two months Samsung pulled the plug on the whole model: production halted, refunds for everyone, an estimated multi-billion-dollar write-off. The engineering post-incident question is brutal and familiar: the first RCA blamed one battery supplier, they switched suppliers, and the fires continued — which means the root cause analysis was WRONG while the fix shipped at global scale. A postmortem that names the wrong cause is worse than no postmortem; it converts confidence into fuel. (Literally, here.) ...

October 11, 2016

Typos That Broke the Internet: S3, GitLab, and Radical Transparency

Typos That Broke the Internet (Oct 2016 – Dec 2017) If one window proved that public, honest postmortems build more trust than they cost, it’s this one. A livestreamed database recovery and a typo that took down half the web produced two of the most-read incident reports in history. The incidents that defined the period Dyn DNS DDoS, October 21, 2016 — The Mirai botnet, built from IoT devices, took down a major managed-DNS provider and with it Twitter, Netflix, Reddit, and GitHub for much of a day. The industry’s introduction to dependency concentration: dozens of “independent” sites shared one DNS provider. GitLab database incident, January 31, 2017 — An exhausted engineer, fighting replication lag, ran rm -rf on the primary’s data directory. Five backup mechanisms failed or were misconfigured. GitLab livestreamed the recovery on YouTube and published a minute-by-minute postmortem (about.gitlab.com). ~6 hours of data was lost — and GitLab’s reputation arguably improved. AWS S3 us-east-1, February 28, 2017 — An operator debugging the billing system mistyped a playbook parameter and removed far more capacity than intended; the index subsystem required a full restart it hadn’t had in years (aws.amazon.com/message/41926). Thousands of sites broke — including, memorably, AWS’s own status page, whose health icons were hosted on S3. Cloudbleed, February 2017 — A parser bug leaked memory across Cloudflare customers into cached pages. Cloudflare’s forensic-grade disclosure set a new bar for security postmortems. British Airways, May 2017 — A datacenter power event (a contractor and a UPS) grounded flights globally; the vague public explanation became the counterexample to GitLab-style transparency. Equifax breach, 2017 — An unpatched Struts vulnerability; the postmortem lesson was less about the bug than about asset inventory and patch governance. What the postmortems reveal 1. Transparency won, decisively. GitLab and AWS gave specifics (the command, the parameter, the safety checks now added); BA gave vagueness. The market noticed which companies it trusted more afterward. “Publish the real postmortem” became a competitive strategy, not a legal risk. ...

October 1, 2016 · October 2016 – December 2017 · Retrospective

Patch Notes #091 — Spectacles and Spectacle

Snap (formerly Snapchat, rebranded this week — the app is now one product of a self-declared “camera company”) announced SPECTACLES: $130 sunglasses that record ten-second circular videos. And here’s the thing — after Google Glass became the cautionary tale (#004’s coffee-shop cyborgs never did get cool), Snap’s version might actually work, because they made it a TOY. A fashion-forward, teen-priced, deliberately-scarce toy sold from vending machines, not a $1,500 face computer for enterprise futurists. Same hardware category, opposite cultural strategy. Positioning is engineering by other means. ...

September 26, 2016

Patch Notes #090 — Courage and Combustion

Apple killed the headphone jack. The iPhone 7 has no 3.5mm port — a 138-year-old connector, deprecated on stage, and the marketing chief actually used the word “COURAGE,” which the internet will never, ever let die. The replacement bet is AirPods: $159 wireless earbuds that look like cigarette butts and, per everyone who’s tried them, work like actual magic (the W1 pairing chip is the real product). My take, on the record: in two years the jack outrage will be forgotten and every phone will copy this, because Apple doesn’t remove ports first so much as remove them LOUDEST. (See: floppy, CD drive, every port on the MacBook. The obituary is always premature and always eventually true.) ...

September 11, 2016

Patch Notes #089 — Triple-Triple

Rio closed and the ledger is mythological: Usain Bolt completed the TRIPLE-TRIPLE — 100m, 200m, 4x100m gold, at three consecutive Olympics. Nine finals, nine golds, zero doubt, all charisma. Phelps retires (again) at TWENTY-THREE career golds — more than most COUNTRIES. Biles owns four golds and the sport’s future. I watched a human run 100 meters in 9.81 seconds while grinning sideways at the field, and I understand now why my non-tech friends tolerate my AlphaGo monologues: excellence in any domain is legible to every domain. ...

August 27, 2016

Patch Notes #088 — Rio and the Sky That Promised Too Much

The Rio Olympics are ON — Phelps, at 31, in his fifth Games, is out here winning golds like it’s 2008; Simone Biles is performing gymnastics from a higher difficulty tier than the sport’s scoring anticipated; and the pool has inexplicably turned GREEN (algae + chemistry mismanagement — even the Olympics has infra incidents, and their status-page communication was worse than ours in 2013). The opening ceremony ran on a fraction of London’s budget and was better for the constraint. Constraints breed brilliance; see also: everything (#062). ...

August 12, 2016