Blog

What happens in production, with sources.

Short notes on cloud, legacy systems, payments and AI in production. Each one starts from a published fact and ends with what a team would do about it.

Page 2 of 3

A file that doubled in size took Cloudflare down for hours. It wasn't an attack

A permissions change in a database caused a configuration file to double in size and exceed an internal limit. The file spread across the entire network, and traffic started failing at 11:20 UTC; it took until 17:06 for everything to return to normal. At first the team thought it was an attack. It was a file generated by Cloudflare's own systems.

Your Node.js 20 Lambda functions have been running without guaranteed patches since April

AWS deprecated the Node.js 20 runtime on Lambda on April 30, 2026: since then, AWS may no longer apply security patches to it, and those functions no longer have technical support. They keep running, but starting February 1, 2027 you won't be able to create them, and starting March 3 you won't be able to update them either. The day you need an urgent fix, you'll have to migrate first.

In three days of Hot Sale, half the companies sold as much as in three weeks

Hot Sale 2026, Argentina's largest online sales event, brought in ARS 673 billion and topped 6 million orders, according to CACE, the country's e-commerce chamber. Half of the participating companies reported selling as much in those three days as in three weeks of April, or more. On average, for those companies, every hour the site is down weighs about as much as seven hours of sales on a normal day.

Almost half of developers distrust what AI writes, and 84% use it or plan to

In Stack Overflow's 2025 survey, 46% of developers say they distrust the accuracy of AI tools and only 33% trust it, even though 84% already use these tools or plan to. The most experienced developers are the most skeptical, and 87% have concerns about the accuracy of agents. What each team still has to settle is who reviews what AI produces.

PostgreSQL 13 on RDS moved to paid Extended Support in March

Standard support for PostgreSQL 13 on Amazon RDS ended on February 28, 2026. Starting the next day, every instance on that version pays an additional Extended Support charge, and the same goes for creating a new one or restoring a snapshot. The database runs the same as before; the bill doesn't.

Researchers showed that a support ticket is enough to make an AI agent publish tokens

In July 2025, researchers at General Analysis set up a test project with Supabase and Cursor and showed that a support ticket with hidden instructions was enough to make the agent read a table of tokens and copy them into the ticket thread. It was a demonstration with test data, not a real attack. The agent did what it was asked. The problem is that anyone could ask.

Using another ministry's credentials, they pulled data from Renaper and asked $17,000 for a database they claimed held 45 million records

In October 2021, the national ID photos of 44 public figures were posted online, followed by a file with data on 60,000 people, and the attacker asked for about $17,000 for the full database. Renaper, Argentina's national registry of persons, attributed the access to credentials assigned to the Ministry of Health, which made between 600,000 and 800,000 queries a day, and denied a mass download. According to experts quoted in the press, there was no query limit in place to stop anyone.