WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2024 • Aug 22, 2024 • Session details

Answering the Million Dollar Question: Why did I Break Production?

Luís Ventura

Why do deployments inevitably fail? Outages always trace back to people, infrastructure, or code—discover historic blunders and why your curiosity remains the ultimate debugging tool.

Pause
Mute Enter Fullscreen
#1 about 2 min

Understanding the complex landscape of software development

Modern software architectures and changing agile requirements lead to increasingly complicated codebases.

#2 about 3 min

Navigating infrastructure dependencies and distributed team challenges

System integrations and remote work dynamics introduce unique risks to team onboarding and application uptime.

#3 about 2 min

Human error and malicious threats in software systems

Developers and internal employees remain the most vulnerable vectors for severe system failures and external attacks.

#4 about 3 min

Mitigating accidental mistakes and targeted phishing attacks

Limiting access to production hardware and training against macro-enabled email attachments prevents severe operational outages.

#5 about 2 min

The danger of unverified assumptions in critical systems

Failing to document expected constraints and unit formats can cause catastrophic failures in collaborative software engineering.

#6 about 4 min

Evaluating auto-scalable infrastructure and capacity resource requirements

Implementing complex tools like Kubernetes requires careful provisioning and monitoring to avoid resource exhaustion or wasted budget.

#7 about 2 min

Anticipating application load and stress testing production environments

Preparing for massive user influxes through load testing prevents catastrophic application crashes during major public releases.

#8 about 2 min

Mitigating integer overflow issues and planning for scale

Historical data constraints and maximum integer values require proactive database migrations to prevent system panic.

#9 about 6 min

Detecting exposed secret keys using automated scanning tools

Analyzing infrastructure code with static checking immediately flags hardcoded cloud provider credentials before attackers exploit them.

#10 about 3 min

Identifying and patching vulnerable package dependencies systematically

Automated dependency scanners cross-reference project lock files against vulnerability databases to simplify security patching routines.

#11 about 2 min

Scanning infrastructure configuration deployments for security vulnerabilities

Dedicated configuration checkers analyze deployment scripts to catch common infrastructure flaws and bad provisioning practices.

#12 about 2 min

Enforcing logic and syntax standards with code linters

Running code linters catches missing break statements and undefined variables before runtime execution.

#13 about 3 min

Combining automated code analysis with comprehensive testing strategies

Human investigation and peer reviews remain essential for detecting sophisticated backdoors that evade automated validation tools.

Matching moments

3:08 min

Preventing catastrophic failures in high-stakes software

Lars Hupel · WWC 2023

2:40 min

Identifying command injection flaws in developer infrastructures

Vandana Verma Sehgal · LIVE

1:28 min

Shifting security left to adapt to rapid code generation

Milin Desai Milin Desai +3 · WWC Europe 2026

2:49 min

Integrating fundamental security evaluations into agile development sprints

Bozidar Spirovski Bozidar Spirovski +1 · Coffee With Developers

5:30 min

Identifying non-coding software vulnerabilities and organizational risks

Tino Sokic · WWC 2023

2:27 min

Balancing automated security scanners with manual reviews

Anna Oliveira · Coffee With Developers

More from World Congress 2024

Beyond the Hype: Real-World AI Strategies Panel thumbnail
24:07
10 months ago

Beyond the Hype: Real-World AI Strategies Panel

Mike Butcher, Jürgen Müller, Katrin Lehmann, Tobias Regenfuss

Carl Lapierre - Exploring Advanced Patterns in Retrieval-Augmented Generation thumbnail
21:17
almost 2 years ago

Carl Lapierre - Exploring Advanced Patterns in Retrieval-Augmented Generation

Carl Lapierre

Coding an Immersive Copilot using Unity / .NET and Azure OpenAI! thumbnail
31:50
almost 2 years ago

Coding an Immersive Copilot using Unity / .NET and Azure OpenAI!

Zaid Zaim

Building a diverse tech company: The power of Diversity, Equity, Inclusion, and Belonging thumbnail
29:43
almost 2 years ago

Building a diverse tech company: The power of Diversity, Equity, Inclusion, and Belonging

Sue Quackenbush

Dapr in Practice thumbnail
24:08
almost 2 years ago

Dapr in Practice

marcklefter

Minimising the Carbon Footprint of Workloads thumbnail
27:46
almost 2 years ago

Minimising the Carbon Footprint of Workloads

Michael Mueller

Upcoming sessions on this topic

Open session

World Congress 2026 North America

Stop Running Mystery Meat in Production

Jeroen van Erp

Technical Advocate @ SUSE

Jeroen van Erp
Open session

World Congress 2026 North America

On the Public Clock: Open-Source Defense When You're Not in the Club

Nicholas Muy

VP Engineering Platform and Security at Scrut.io

Nicholas Muy
Open session

World Congress 2026 North America

Evals Are Infra: Building AI Systems Developers Can Actually Trust

Phoebe Wang

Member of Technical Staff at OpenAI

Phoebe Wang
Open session

World Congress 2026 North America

It passed auth, then production caught fire

Alex Olivier

Co-founder & CPO @ Cerbos | OpenID AuthZEN Co-chair

Alex Olivier
Open session

World Congress 2026 North America

rm -rf: Horror Stories From Unsandboxed AI Agents (and How Docker Fixes This)

Rishab Kumar

Staff Developer Evangelist @ Twilio

Rishab Kumar
Open session

World Congress 2026 North America

Know Your Enemies: Live Exploit of a PHP Engine Security Breach

Alexandre Daubois

CTO of Les-Tilleuls.coop / Symfony Core Team / PHP & FrankenPHP Core Maintainer

Alexandre Daubois

Related videos

Coffee with Developers with Feross Aboukhadijeh of Socket about the xz backdoor thumbnail
42:55
Coffee With Developers • over 2 years ago

Coffee with Developers with Feross Aboukhadijeh of Socket about the xz backdoor

Feross Aboukhadijeh

The Software Bug All Stars - and what we can learn from them thumbnail
27:27
WWC 2022 • about 4 years ago

The Software Bug All Stars - and what we can learn from them

Christian Seifert

Surviving the Vulnpocalypse: Open Source and Supply Chain Security in a Post Mythos World thumbnail
27:56
WWC Europe 2026 • about 1 month ago

Surviving the Vulnpocalypse: Open Source and Supply Chain Security in a Post Mythos World

Adrian Mouat

The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most thumbnail
24:33
WWC Europe 2026 • about 1 month ago

The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most

Marcus Wermuth

Checkmate: 5 Real Incidents That Can End a Software Company thumbnail
27:08
WWC Europe 2026 • about 1 month ago

Checkmate: 5 Real Incidents That Can End a Software Company

Jasmin Azemović

Your AI Ships Code Faster Than Anyone Can Review It thumbnail
4:27
WWC Europe 2026 • about 1 month ago

Your AI Ships Code Faster Than Anyone Can Review It

Rasmus Klärck

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.