3 ms·
Why take the risk of continuing to run a tainted host, though, if you can just tear it down and spin up a new, clean, untouched one? I think there’s another le
by jameshart 9y ago
Why take the risk of continuing to run a tainted host, though, if you can just tear it down and spin up a new, clean, untouched one?
I think there’s another level we need beyond treating servers as pets or cattle, which is treating servers as wild animals; after you’ve captured one and interacted with it, you’ve doomed it because now it has the scent of humans on it.
- subway 9y agoSure, but that does nothing to prevent the person who invoke the debugger from inadvertently triggering prod alerts, possibly encouraging more folks to ssh in to see what's going on.
- gowld 9y agoGood hiring and training practices prevent people from invoking the debugger on live prod machines
- subway 9y agoThere are times when it has to happen. It certainly shouldn't be an every day occurrence, but even in the best environments, there are times when SHTF only under a production workload, and you need an understanding of why yesterday.