A hacked WordPress, two attackers, and the hole no antivirus saw
The site is down. Blank page, HTTP 200, no PHP error in the logs. Nothing to grab onto. Googlebot, meanwhile, gets full pages. Links to counterfeit…
Latest News
⚑ Report a ProblemTech news from the best sources
All topics
AI
Gear
News
Tech
agents
ai
api
architecture
automation
beginners
career
database
devchallenge
devops
javascript
llm
machinelearning
mcp
opensource
performance
productivity
programming
python
react
security
showdev
testing
tutorial
typescript
webdev
How We Handled Our First Major Outage (And Survived)
Three years ago we had our first real outage. Six hours of downtime. Thousands of angry users. Multiple executives on the call. Here's what we did r…
Incident Command: The Skills They Don't Teach You
Running a production incident is a skill. Most of the skill isn't technical. Here's what nobody told me when I started running incidents. Skill 1: C…
I let an AI handle an outage. It invented a hack that never happened, then spiraled
One evening, a monitoring alert went off: a server behind a web service was down. I handed the incident to an AI coding agent. Half experiment, half…
Incident Automation: What to Automate, What to Leave to Humans
Incident response automation is a trap. Some things should be automated. Some things absolutely should not be. Getting the line wrong is worse than…
How We Handled Our First Major Outage (And Survived)
Three years ago we had our first real outage. Six hours of downtime. Thousands of angry users. Multiple executives on the call. Here's what we did r…
Incident Command: The Skills They Don't Teach You
Running a production incident is a skill. Most of the skill isn't technical. Here's what nobody told me when I started running incidents. Skill 1: C…
3rd OOM on the VPS: Parallel Builds and a flock Mutex Story
Scene: "the sites are down dude" Wednesday, May 7, afternoon. A message on my phone: "the sites are down dude." Quick check: my own blog (mustafaerb…
Docker Ate 56 GB of Disk in a Day: Building a Cleanup Automation
"no posts for hours" — the message I got I noticed it in the evening — my hourly content-generate cron hadn't completed a single successful run sinc…
Stripe Webhook Was Silently Failing for 5 Days: The 4xx Retry Trap and the Beginning-of-Month Time Bomb
TL;DR 21 invoice.paid webhooks failed for 5 straight days in production. We only noticed because Stripe sent a "we'll auto-disable this endpoint by…
Postmortem: AI Incident Classifier Failed Due to Biased Training Data and Scikit-Learn 1.5
In Q3 2024, a production AI incident classifier mislabeled 42% of critical security incidents as 'low priority' over 72 hours, causing $2.1M in SLA…