The Backend Engineering Show with Hussein Nasser

Exposed Postgres instances are being ssh into and used as a botnet to mine bitcoin, in this video we explain how does that happens.   the trick is the COPY FROM PROGRAM command

At 3:47 am PST almost all google services went down including, gmail, youtube, drive, docs, meet, nest , google maps and many more. It took close to an hour to bring them back up. We still don’t know what caused this outage, in this video we will try to make sense from what we have gathered so far. A detailed analysis video will follow once we get a response from google

symptoms

https://twitter.com/googlecloud/status/1338493015145504770

https://www.tomsguide.com/news/gmail-and-youtube-down-several-google-services-are-not-working-latest-updates

Google down? Realtime status, issues and outages for the UK | Downdetector

Google Workspace Status Dashboard

When the private key of a matching public key that belong to a certificate is leaked, an attacker can intercept server hello, use their own dh parameters sign it with the stolen private key and ship it to the client effectively doing MITM. This is extremely dangerous and we have no way in the client to know a MITM has happened.

That is why a certificate sometimes has to be revoked, and in this video I’m going to discuss those revocation techniques.

0:00 How Certificate Works

3:00 Certificate Revocation List

4:10 OCSP

7:00 OCSP Stapling

In The Backend Engineering Show Live, we discuss Impostor syndrome and Staying Motivated in software engineering field.

Oblivious DoH is a technology that separates IP addresses from queries, so that no single entity can see both at the same time.

Cloudflare, Apple & Fastly worked on this and did a good write-up of the tech, we discuss it in this video

https://blog.cloudflare.com/oblivious-dns/

https://blog.cloudflare.com/oblivious-dns/

Oracle introduces a Game Changer Feature in MySQL that allows for OLAP & OLTP workloads in a single database. This is huge let us discuss

https://www.oracle.com/emea/news/announcement/oracle-announces-mysql-database-service-with-integrated-analytics-engine-2020-12-03.html

https://dev.mysql.com/doc/mysql-analytics/en/mysql-analytics-introduction.html

0:00 Intro

1:40 History of ETL

7:00 How Kafka Helped Data Warehouse

8:20 How RAPID Solves this

11:14 MySQL Database Service Analytics Engine (RAPID) Architecture

14:00 Loading Data

18:00 Summary

In The Backend Engineering Show Live we will have a casual Q&A around QUIC Outline  HTTP/1.1 Trouble HTTP/2 Trouble QUIC Handshake QUIC 0RTT HPACK vs QPACK Why HTTP/3

In AWS re-invent, Amazon announced open sourcing Babelfish for PostgreSQL, a SQL Server-compatible end-point for PostgreSQL to make PostgreSQL fluent in understanding communication from apps written for SQL Server. Let us discuss what is this technology and whether if its gonna really move developers away form Microsoft SQL Server to Postgres

Resources

https://aws.amazon.com/blogs/opensource/want-more-postgresql-you-just-might-like-babelfish/

Chapters

0:00 Intro

1:30 Postgres vs SQLServer

5:20 What is Babelfish?

9:40 Why Babelfish May not Work

10:06 Will Babelfish Includes everything?

11:46 BabelFish is an Extra Layer

13:35 What REALLY is Babelfish?

15:00 Performance

AWS US east-1 experienced an outage Nov-25-2020. Amazon has updated us with summary detailing what exactly happened to amazon Kinesis that caused the outage let us discuss it

0:00 Intro

1:00 Tldr (diagram)

7:30 Detailed Analysis of What Happened

25:00 Why Cognito Went Down

31:20 Why CloudWatch Went Down

33:20 Why Lambda and AutoScaling Went Down

35:50 Why EventBridge, Elastic Kubernetes and Container Service Went Down

38:00 Why Service Status Went Down

40:00 Summary

https://aws.amazon.com/message/11201/