• 0 Posts
  • 20 Comments
Joined 1 year ago
cake
Cake day: August 16th, 2023

help-circle












  • You can make rules network-wide, per-app, or per-incident. The latter is useful for getting a handle on app behavior. Like if you see it contacting ‘updates.somedev.com’ weekly, you can choose to allow or disallow permanently based on how benign you think the app is. But more likely, anything trying to phone home has a dozen CDNs it’s trying to hit rather than an easily identifiable URL. Block one, it tries to hit the other. Maybe today, maybe next week. It gets overwhelming (which IMO is a feature for the dev, not a bug).







  • I bet at one time they had a functional threshold alerting system. Then someone missed something (because they’re human) and management ordered more alerts “so it doesn’t happen again.” Wash, rinse, repeat over the course of years (combined with VM sprawl and acquiring competitors) until there’s no semblance of sanity left, having gone far past notification fatigue and well into “my job is just checking email and updating tickets now.” But management insists that all of those alerts are needed because Joe Bob missed an email… which there are now exponentially more of… and the board is permanently half red anyway because the CTO (bless his sociopathic heart) decreed that 80% is the company standard for alerts and a bunch of stuff just lives there happily so good luck seeing something new.

    …I was not expecting to process that particular trauma this evening.