Mislabeled debug pod silently routed live checkout traffic to staging DB for 19 days

·67 views

A production incident at a software team went undetected for 19 days after an engineer copied a checkout deployment manifest into the production namespace to reproduce a bug, inadvertently retaining the same pod labels used by the production Kubernetes Service selector. Because Kubernetes Services route traffic based solely on label queries, the three debug pods matched the selector alongside six production pods and received roughly one-third of real customer checkout writes — all directed at the staging database. No alerts fired because the debug pods returned HTTP 200 responses, reported metrics under the same service label, and even showed marginally better latency, masking the misdirection entirely. The issue was discovered only when a colleague noticed a real customer order, complete with a live card reference, inside the staging admin tool. In response, the team introduced unique per-deployment instance labels, a policy rule blocking config-to-namespace environment mismatches, and a nightly audit report flagging Services backed by more than one workload.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Actuator Requirements for Robot Hands: Torque Density, Precision, and Compliance

The article explains that robot hands are among the most demanding actuator applications, since they must simultaneously meet requirements for precision, dexterity, force generation, compactness, safety, efficiency, and reliability. Unlike large industrial robot joints, robot hands must deliver human-like functions within very limited space, making actuator selection a central design decision. Key requirements include high torque density and power density, appropriate speed trade-offs, and precise positioning with low backlash and high-resolution feedback. The text also highlights repeatability, compliance for handling fragile objects and interacting with humans, precise force control, and backdrivability as critical considerations.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Why an AML 'Low Risk' Score Doesn't Guarantee a Wallet Is Clean

A crypto wallet receiving a low-risk anti-money-laundering rating does not fully settle the question of its safety, the article argues. Such scores are built from varied inputs, including direct and indirect links to flagged addresses, sanctions attribution, and unusual transaction patterns, and different providers can reach different conclusions for the same wallet. Direct exposure to a suspicious address is generally treated differently from a distant, multi-hop connection, since the number of intermediaries, timing, and quality of attribution all shape what a warning means. Blockchain history can reveal useful patterns, but it does not identify an owner or prove criminal intent. Users are advised to check what triggered an assessment, the source and currency of the data, and what the screening tool actually covers.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Robot Finger Mechanism Design: Degrees of Freedom, Kinematics, and Compliance

The article explains that robot finger mechanism design is foundational to robot hand engineering, since finger structure governs grasp stability, dexterity, payload, durability, and overall system intelligence. It notes that finger design differs from industrial arm design because fingers operate in constrained, contact-rich environments where friction, compliance, and force distribution must be considered from the outset. Key decisions discussed include the number of degrees of freedom, which trades manipulation capability against complexity, cost, and control difficulty, and the kinematic layout of links and joints, often modeled loosely on the human hand. The text also contrasts fully actuated designs with underactuated ones that use springs, tendons, or differential mechanisms, and emphasizes compliance as a means to adapt to uncertain object shapes and reduce impact failures. It concludes by highlighting the balance engineers must strike between stiffness and compliance, typically supported by finite element analysis, and noting that transmission design also strongly affects performance.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Python asyncio: Running Waiting Tasks Concurrently Without Threads

A small shop checking stock with four suppliers illustrates the problem: doing each slow check in sequence wastes time while the program sits idle. The article explains that asyncio helps when work is dominated by waiting, such as network calls or database queries, but not when the work is CPU-bound. It also notes that asyncio requires async-compatible libraries, since a blocking call stalls the whole event loop. The author advises limiting concurrency for large numbers of tasks and using plain sequential code for simple one-off scripts. The example uses asyncio.gather with simulated delays to show that four waits finish in roughly the time of the longest one.

0 comments Read more at DEV Community