World Congress 2024 • Aug 22, 2024 • Session details

Answering the Million Dollar Question: Why did I Break Production?

Luís Ventura

Why do deployments inevitably fail? Outages always trace back to people, infrastructure, or code—discover historic blunders and why your curiosity remains the ultimate debugging tool.

Pause
Mute Enter Fullscreen
#1 about 2 min

Understanding the complex landscape of software development

Modern software architectures and changing agile requirements lead to increasingly complicated codebases.

#2 about 3 min

Navigating infrastructure dependencies and distributed team challenges

System integrations and remote work dynamics introduce unique risks to team onboarding and application uptime.

#3 about 2 min

Human error and malicious threats in software systems

Developers and internal employees remain the most vulnerable vectors for severe system failures and external attacks.

#4 about 3 min

Mitigating accidental mistakes and targeted phishing attacks

Limiting access to production hardware and training against macro-enabled email attachments prevents severe operational outages.

#5 about 2 min

The danger of unverified assumptions in critical systems

Failing to document expected constraints and unit formats can cause catastrophic failures in collaborative software engineering.

#6 about 4 min

Evaluating auto-scalable infrastructure and capacity resource requirements

Implementing complex tools like Kubernetes requires careful provisioning and monitoring to avoid resource exhaustion or wasted budget.

#7 about 2 min

Anticipating application load and stress testing production environments

Preparing for massive user influxes through load testing prevents catastrophic application crashes during major public releases.

#8 about 2 min

Mitigating integer overflow issues and planning for scale

Historical data constraints and maximum integer values require proactive database migrations to prevent system panic.

#9 about 6 min

Detecting exposed secret keys using automated scanning tools

Analyzing infrastructure code with static checking immediately flags hardcoded cloud provider credentials before attackers exploit them.

#10 about 3 min

Identifying and patching vulnerable package dependencies systematically

Automated dependency scanners cross-reference project lock files against vulnerability databases to simplify security patching routines.

#11 about 2 min

Scanning infrastructure configuration deployments for security vulnerabilities

Dedicated configuration checkers analyze deployment scripts to catch common infrastructure flaws and bad provisioning practices.

#12 about 2 min

Enforcing logic and syntax standards with code linters

Running code linters catches missing break statements and undefined variables before runtime execution.

#13 about 3 min

Combining automated code analysis with comprehensive testing strategies

Human investigation and peer reviews remain essential for detecting sophisticated backdoors that evade automated validation tools.

Matching moments

1:22 min

Discovering security vulnerabilities outside primary application code

Farshad Abasi Farshad Abasi · World Congress 2026 North America

3:08 min

Preventing catastrophic failures in high-stakes software

Lars Hupel · World Congress 2023

2:40 min

Identifying command injection flaws in developer infrastructures

Vandana Verma Sehgal · LIVE

1:28 min

Shifting security left to adapt to rapid code generation

Milin Desai Milin Desai +3 · World Congress 2026 Europe

2:49 min

Integrating fundamental security evaluations into agile development sprints

Bozidar Spirovski Bozidar Spirovski +1 · Coffee With Developers

5:30 min

Identifying non-coding software vulnerabilities and organizational risks

Tino Sokic · World Congress 2023

Upcoming sessions on this topic

Open session

Supply Chain Security for the Everyday Engineer

  • Pradumna Saraf

    Kestra Technologies

    Quality Assurance Engineer

Open session

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

  • Vikram Vaswani

    Consultant

Open session

What I Got Wrong Shipping an MCP Server for Live Infrastructure

  • Pritesh Kiri

    Harness

    Developer Relations Engineer

Open session

Autopsy of an Autonomous Incident: When the Agent Made It Worse

  • Navin Pai

    StackGen

    Director of Engineering

Open session

How We Cut Our API's p99 Latency from Minutes to Under a Second

  • Deepak Agrawal

    Atlassian

    Principal Software Engineer

Open session

Prompt Debt: Why Your AI System Is Frozen in Time

  • Suriya Prakash B

    Red Hat

    Principal Software Engineer