Around the same time, Cloudflare’s chief technology officer Dane Knecht explained that a latent bug was responsible in an apologetic X post.

“In short, a latent bug in a service underpinning our bot mitigation capability started to crash after a routine configuration change we made. That cascaded into a broad degradation to our network and other services. This was not an attack,” Knecht wrote, referring to a bug that went undetected in testing and has not caused a failure.

  • A_norny_mousse@feddit.org
    link
    fedilink
    English
    arrow-up
    2
    ·
    34 minutes ago

    a routine configuration change

    Honest question (I don’t work in IT): this sounds like a contradiction or at the very least deliberately placating choice of words. Isn’t a config change the opposite of routine?

    • monkeyslikebananas2@lemmy.world
      link
      fedilink
      English
      arrow-up
      3
      ·
      26 minutes ago

      Not really. Sometimes there are processes designed where engineers will make a change as a reaction or in preparation for something. They could have easily made a mistake when making a change like that.

      • NotMyOldRedditName@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        edit-2
        10 seconds ago

        I don’t think it was a bug making the configuration change, I think there was a bug as a result of that change.

        That specific combination of changes may not have been tested, or applied in production for months, and it just happened to happen today when they were needed for the first time since an update some time ago, hence the latent part.

      • 123@programming.dev
        link
        fedilink
        English
        arrow-up
        2
        ·
        edit-2
        2 minutes ago

        E.g.: companies that advertise on a large sporting event might preemptively scale up (maybe warm up depending on language) their servers in preparation for a large load increase following some ad or mention of a coupon or promo code. Failure to capture the market it could generate would be seen as wasted $$$

        Edit: auto-scale does not count on non essential products, people would not come back if the website failed to load on the first attempt.

        • aeronmelon@lemmy.world
          link
          fedilink
          English
          arrow-up
          7
          ·
          2 hours ago

          Fun fact time:

          That’s why they’re called computer bugs.

          In 1947, the Harvard Mark II computer was malfunctioning. Engineers eventually found a dead moth wedged between two relay points, causing a short. Removing it fixed the problem. They saved the moth and it’s on display at a museum to this day.

          The moth was not okay.

          And to be fair, the word bug had been used to describe little problems and glitches before that incident, but this was the first case of a computer bug.

      • iglou@programming.dev
        link
        fedilink
        English
        arrow-up
        2
        ·
        34 minutes ago

        Obviousness? If you mass layoff your tech staff, you take the risk of more technical failures.

        A smaller staff cannot do the same work as a larger one, and I guarantee you they’re being asked to progress at the same speed. So, the tradeoff is on the quality of the product and the testing, not on the speed of development.

    • MagicShel@lemmy.zip
      link
      fedilink
      English
      arrow-up
      86
      arrow-down
      1
      ·
      8 hours ago

      Shitty code has been around far longer than AI. I should know, I wrote plenty of it.

        • FauxLiving@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          ·
          12 minutes ago

          It’s always depressing when you ask the AI to explain your code and then you get banned from OpenAI

        • MagicShel@lemmy.zip
          link
          fedilink
          English
          arrow-up
          21
          ·
          7 hours ago

          Shame on them. I mark my career by how long it takes me to regret the code I write. When I was a junior, it was often just a month or two. As I seasoned it became maybe as long as two years. Until finally i don’t regret my code, only the exigencies that prevented me from writing better.

    • renegadespork@lemmy.jelliefrontier.net
      link
      fedilink
      English
      arrow-up
      11
      ·
      8 hours ago

      Indirectly, this was. He said this was a bug in their recent tool that allows sites to block AI crawlers that caused the outages. It’s a relatively new tool released in the last few months, so it makes sense it might be buggy as the rush to stop the AI DoS attacks has been pertinent.

  • DaMummy@lemmy.world
    link
    fedilink
    English
    arrow-up
    15
    arrow-down
    10
    ·
    9 hours ago

    Why’s he saying it’s not an attack? Sounds like he’s protesting too much.

    • grumpasaurusrex@lemmy.world
      link
      fedilink
      English
      arrow-up
      8
      ·
      6 hours ago

      There’s nothing to be gained from Cloudflare lying about this. It honestly makes them look worse if the outage was caused internally vs if it had been due to an attack