News for hackers. Stuff that matters.
Re:How to properly manage SSH keys for server access by athms on Saturday September 26, 2020 @08:34PM (#24603277)
>What if you encounter an nginx bug, or a kernel bug?

That is the responsibility of system administrators. Application developers have no business on a production machine. If your sysadmins don't have the technical skills to diagnose these problems, they are incompetent and must be replaced.

Re:How to properly manage SSH keys for server access by Aeolun on Saturday September 26, 2020 @09:45PM (#24603546)
> If your sysadmins don't have the technical skills to diagnose these problems, they are incompetent and must be replaced.

The actual result of this is that the sysadmins are not replaced, and the application developers end up in an emergency conference call at 3am to tell the sysadmins which buttons to click on the production environment, since they’re not allowed access themselves.

Re:How to properly manage SSH keys for server access by athms on Tuesday October 06, 2020 @08:26AM (#24696966)
I spent several years at a large multinational cloud provider that gave developers and QA access to production systems and customer PII. That all changed after the company was bought by SAP and operations were integrated. I am amazed that engineers think this is acceptable. It is bad business practice, compromises security, and illegal in some jurisdictions.
Re:How to properly manage SSH keys for server access by toomuchtodo on Saturday September 26, 2020 @11:19PM (#24603957)
If developers aren’t exposed to the deficiencies in their systems, they have no incentive to reduce SRE pages and triage. Build resilient code with quality documentation and you don’t have to attend a 3am conf call.

DevOps is not a role or role segregation, it’s about aligning incentives and outcomes across functions in an org (hopefully through collaboration, tooling, and knowledge transfer).

The caveat is that if your org is fundamentally broken, none of the above applies or works and it’s all lipstick on a pig.