New Google SRE book: Building Secure and Reliable Systems • Hacker News Board

Re: New Google SRE book: Building Secure and Reliable Systems

#61

Post by sethvargo » Wed, Apr 08, 2020, 8:07 PM UTC

Veserv wrote: post #57

I scanned the introduction, but failed to see any concrete information on the expertise of the authors on security. Can anybody speak to the expertise of the authors on security? In particular, I am interested in specific projects or initiatives they directed or lead. The state of systems before and after these projects. If there were any long-term regressions after their involvement. To be even more concrete if poss…

> Can anybody speak to the expertise of the authors on security?

I think a cursory LinkedIn or social media search for any of the title authors or chapter authors will demonstrate their credentials. There were many people involved in this book, all of whom carry the necessary credentials and experience.

> Personal questions for the responder:

Guidelines help us scale, but at the end of the day, some services are unique and require additional review. I recommend reading the bits on threat modeling for more information.

Re: New Google SRE book: Building Secure and Reliable Systems

#62

Post by AaronFriel » Wed, Apr 08, 2020, 8:07 PM UTC

Veserv wrote: post #57

I scanned the introduction, but failed to see any concrete information on the expertise of the authors on security. Can anybody speak to the expertise of the authors on security? In particular, I am interested in specific projects or initiatives they directed or lead. The state of systems before and after these projects. If there were any long-term regressions after their involvement. To be even more concrete if poss…

> "Would the system prevent compromise by a red team with a $1 Billion... budget"

Are there any such systems deployed in the world today?

Re: New Google SRE book: Building Secure and Reliable Systems

#63

Post by containrh4x0r » Wed, Apr 08, 2020, 8:09 PM UTC

another gem "ptrace sandboxing" ala gvisor which is horribly slow and shouldn't be used for production systems

https://news.ycombinator.com/item?id=19924036

seriously - what is going on at google nowadays? has it always been like this?

Re: New Google SRE book: Building Secure and Reliable Systems

#64

Post by containrh4x0r » Wed, Apr 08, 2020, 8:11 PM UTC

AaronFriel wrote: post #62

Veserv wrote: post #57

I scanned the introduction, but failed to see any concrete information on the expertise of the authors on security. Can anybody speak to the expertise of the authors on security? In particular, I am interested in specific projects or initiatives they directed or lead. The state of systems before and after these projects. If there were any long-term regressions after their involvement. To be even more concrete if poss…

> "Would the system prevent compromise by a red team with a $1 Billion... budget" Are there any such systems deployed in the world today?

jp morgan chase has a security budget of $600M/yr

https://www.secureworldexpo.com/industry-news/jpmorgan-chase...

Re: New Google SRE book: Building Secure and Reliable Systems

#65

Post by sethvargo » Wed, Apr 08, 2020, 8:12 PM UTC

brightball wrote: post #4

Is there a more digestible version of SRE concepts somewhere? I'm just looking for an easier way to communicate core principles and concepts to my team without asking them to sink into 500 pages?

There's quite a few resources. Liz and I did a video series https://www.youtube.com/watch?v=uTEL8Ff1Zvk and blog series: https://cloud.google.com/blog/products/gcp/sre-vs-devops-com.... It's about 50min of content, but it's framed through a slightly different lens. There's also a coursera course: https://www.coursera.org/lecture/site-reliability-engineerin...

Disclaimer: I work for Google

Re: New Google SRE book: Building Secure and Reliable Systems

#66

Post by gonehome » Wed, Apr 08, 2020, 8:12 PM UTC

colinrand wrote: post #51

The most challenging part of this series is not in the material itself. These insights are learnings through hard experience and scale from Google are invaluable. No, the hard thing for everyone is to recognize is that most companies are not Google and don't have Google's problems, resources, or time to follow these practices. Definitely read the material, I will thoroughly, but don't apply this blindly. Solve YOUR p…

People say this a lot as an excuse to keep the status quo, but often times the problems do overlap and the solutions are generally good everywhere.

Re: New Google SRE book: Building Secure and Reliable Systems

#67

Post by ulysses » Wed, Apr 08, 2020, 8:13 PM UTC

nemonik wrote: post #58

ignoramous wrote: post #40

Earlier quoted context omitted.

I really liked that there were HTML versions of the previous two books. Any chance that'll be up for this one? A bit far-fetched but: Have you (or anyone else at Google) looked at Amazon Builder's Library [0] and/or various re:Invent / re:Inforce talks from 2018/19 [1][2] that focus on similar topics as in this book and other SRE books? If so, what are some ideas (infrastructure, blast radius, incident management, re…

Download the epub version and on the Linux command-line execute `tar -zxvf srs-epub.epub` then cd into unpacked `OEBPS/` folder and there's your HTML files. Not exactly what you are looking for, but you can browse the content in a web browser.

That doesn't work, unless you have an unusual Linux setup:

  $ tar -zxvf srs-epub.epub
  gzip: stdin has more than one entry--rest ignored
  tar: Child returned status 2
  tar: Error is not recoverable: exiting now

But you can do "unzip srs-epub.epub".

Re: New Google SRE book: Building Secure and Reliable Systems

#68

Post by jwkane » Wed, Apr 08, 2020, 8:14 PM UTC

Veserv wrote: post #57

I scanned the introduction, but failed to see any concrete information on the expertise of the authors on security. Can anybody speak to the expertise of the authors on security? In particular, I am interested in specific projects or initiatives they directed or lead. The state of systems before and after these projects. If there were any long-term regressions after their involvement. To be even more concrete if poss…

1. Is it reasonable to expect a very specific list of questions to be addressed in the introduction to a book?

Re: New Google SRE book: Building Secure and Reliable Systems

#69

Post by pronoiac » Wed, Apr 08, 2020, 8:17 PM UTC

saltedonion wrote: post #43

sethvargo wrote: post #14

Hey everyone - Seth from Google here. Thank you for all the positive comments about the book. I'll be around to answer any questions you might have. As noted, the book can be downloaded for free in digital formats. PDF: https://landing.google.com/sre/static/pdf/SRS.pdf EPUB: https://landing.google.com/sre/static/pdf/srs-epub.epub MOBI: https://landing.google.com/sre/static/pdf/srs-mobi.mobi

I’m on mobile safari and the ePub and mobi files open as text. This means I can’t export them to Apple Books or the iOS kindle app. Could you please trigger a download instead if possible ?

I downloaded it on my Mac, airdropped it to my iPad, and that was able to send it to Bluefire Reader.

Re: New Google SRE book: Building Secure and Reliable Systems

#70

Post by tasuki » Wed, Apr 08, 2020, 8:18 PM UTC

Veserv wrote: post #57

I scanned the introduction, but failed to see any concrete information on the expertise of the authors on security. Can anybody speak to the expertise of the authors on security? In particular, I am interested in specific projects or initiatives they directed or lead. The state of systems before and after these projects. If there were any long-term regressions after their involvement. To be even more concrete if poss…

You seem much more interested in the authors than in the book.