51–60 of 227 posts
No, the hard thing for everyone is to recognize is that most companies are not Google and don't have Google's problems, resources, or time to follow these practices.
Definitely read the material, I will thoroughly, but don't apply this blindly. Solve YOUR problems, not theirs.
Earlier quoted context omitted.
You mean the same program that also "infiltrated" (I guess you take those companies at their word that they weren't cooperating) every other tech giant? Again, that's why I asked "Compared to what?" What is your favorite tech company, uninfiltrated by the NSA while also serving billions of users, whose SRE books would be more worthwhile?
Assuming that an answer to your question is even quantifiable (it isn't since you're asking me to prove nonexistence), how is it relevant to my original question? The security failures that allowed the NSA to come in were comical. Deliberate choices that Google made are for the most part responsible for the Android fiasco. In fact, Google is one of the behemoths that put us all at -ever increasing- risk in the name o…
The most challenging part of this series is not in the material itself. These insights are learnings through hard experience and scale from Google are invaluable. No, the hard thing for everyone is to recognize is that most companies are not Google and don't have Google's problems, resources, or time to follow these practices. Definitely read the material, I will thoroughly, but don't apply this blindly. Solve YOUR p…
(disclaimer: I work at Google)
Earlier quoted context omitted.
I’m on mobile safari and the ePub and mobi files open as text. This means I can’t export them to Apple Books or the iOS kindle app. Could you please trigger a download instead if possible ?
Thanks for the feedback. This is a known issue that another user flagged this morning. The team is pursuing a fix. The content-type on the file is incorrect :/. In the meantime, you can open it in a browser and email it to yourself. Not ideal, but a workaround. [EDIT]: s/pursing/pursuing
Is there a more digestible version of SRE concepts somewhere? I'm just looking for an easier way to communicate core principles and concepts to my team without asking them to sink into 500 pages?
In particular, I am interested in specific projects or initiatives they directed or lead. The state of systems before and after these projects. If there were any long-term regressions after their involvement.
To be even more concrete if possible:
1. What was the project and what would occur in the event of unmitigated compromise?
2. What was the threat model?
2a. Why was that the appropriate threat model given the possible outcomes?
4. What level of resources would be necessary to compromise the systems they were trying to protect?
4a. Would the system prevent compromise by a red team with a $1 Billion, $1 Million, $1000, $1 budget?
4b. What resources did the red teams have?
1. Would you feel comfortable using the processes you have used in the past to develop a system where compromise would result in the loss of human life?
2. If you answered yes, what project and process and why do you believe that it sufficient?
3. If you answered no, do you have any first hand knowledge of systems that achieve that standard?
4. What is the best system that you have first hand knowledge of that has achieved at least that standard? Is there a non-theoretical gold standard?
Hey everyone - Seth from Google here. Thank you for all the positive comments about the book. I'll be around to answer any questions you might have. As noted, the book can be downloaded for free in digital formats. PDF: https://landing.google.com/sre/static/pdf/SRS.pdf EPUB: https://landing.google.com/sre/static/pdf/srs-epub.epub MOBI: https://landing.google.com/sre/static/pdf/srs-mobi.mobi
I really liked that there were HTML versions of the previous two books. Any chance that'll be up for this one? A bit far-fetched but: Have you (or anyone else at Google) looked at Amazon Builder's Library [0] and/or various re:Invent / re:Inforce talks from 2018/19 [1][2] that focus on similar topics as in this book and other SRE books? If so, what are some ideas (infrastructure, blast radius, incident management, re…
Earlier quoted context omitted.
Upvoted since I was going to make the same comment. I have been dealing with some downfall from that issue today. As a user of their cloud services, my perception of their reliability is pretty low compared to competitors. I still like GCP the best though.
> As a user of their cloud services, my perception of their reliability is pretty low compared to competitors. I still like GCP the best though. I guess we tend to notice more the flaws of the services we use the most
Earlier quoted context omitted.
Google search, gmail, maps, their ad systems...?
Weren't they all compromised by NSA, as well as China. And those are the issues that became public. Look up Operation Aurora for instance, or the famous slide deck that highlighted lack of encryption inside Google's network - and security intelligence even put a smile face there!
And Aurora "became public" when Google announced it, it was the other 30+ companies affected by it that kept silent on the issue (some to this day).