--- title: "When your GraphQL endpoint reveals how much beer you drink.." publication: "StatusCode Weekly" issue: 216 published_at: "2019-05-15" canonical_url: "https://weekly.statuscode.com/issues/216" --- The latest Web operations, HTTP, and Web performance news #216 — May 15, 2019 [Read on the Web](https://webopsweekly.com/issues/216) Web Operations Weekly [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60/v1557938649/dhax1fy5o4fla6hso1ng.jpg)](https://blog.cloudflare.com/better-http-2-prioritization-for-a-faster-web/) [Better HTTP/2 Prioritization for a Faster Web](https://blog.cloudflare.com/better-http-2-prioritization-for-a-faster-web/) — Cloudflare has pushed out a change to HTTP/2 prioritization that will ‘make the web much faster’, but how and why? This post goes into a lot of interesting detail. Patrick Meenan (Cloudflare) [Amazon S3's Path Deprecation Plan – The Rest of the Story](https://aws.amazon.com/blogs/aws/amazon-s3-path-deprecation-plan-the-rest-of-the-story/) — Last week, we mentioned that AWS [subtly noted](https://forums.aws.amazon.com/ann.jspa?annID=6776) that they would be deprecating ‘path-style’ requests to S3 in 2020.. this has now turned into a bigger story with a lot more detail. Jeff Barr (AWS) [![\](https://res.cloudinary.com/cpress/image/upload/v1557936631/ebgom8rapsangkt6u2yy.png)](https://get.mux.com/2Jy2Af8) [How to Build a Live Streaming App](https://get.mux.com/2Jy2Af8) — Use Mux's simple, but powerful, video APIs to build live streaming into your application. Mux sponsor [Oak: An Open Certificate Transparency Log from Let's Encrypt](https://letsencrypt.org/2019/05/15/introducing-oak-ct-log.html) — [Certificate Transparency (CT)](https://www.certificate-transparency.org/what-is-ct) is a system for logging and monitoring certificate issuance and now _Let’s Encrypt_ have one of their own which is free and open to all. Let's Encrypt **👀 INTERESTING ASIDES:** - The best opening I've read to a security report ever: _"With great pleasure we would like to report that we have discovered a GraqhQL endpoint that [discloses internal beer consumption at your offices.](https://hackerone.com/reports/419883)"_ - Remember 'math coprocessors' for your 486 back in the 90s? Well, they're now experimenting with [garbage collection coprocessors.](https://spectrum.ieee.org/tech-talk/computing/hardware/this-little-device-relieves-a-cpu-from-its-garbage-collection-duties/) - VMware is [to acquire Bitnami.](https://cloud.vmware.com/community/2019/05/15/vmware-to-acquire-bitnami/) - Cloudflare, the ever popular CDN-and-more provider, has [introduced an image resizing service.](https://blog.cloudflare.com/announcing-cloudflare-image-resizing-simplifying-optimal-image-delivery/) - Linode has opened [a data center in Toronto.](https://blog.linode.com/2019/04/30/linode-toronto-data-center-now-available/) - We reported on F5's acquisition of NGINX recently, but [now it's official.](https://www.nginx.com/blog/nginx-is-now-officially-part-of-f5/) - Twilio has unveiled [a 'Super SIM'](https://www.twilio.com/wireless/super-sim) for IoT devices to be able to phone home wherever they are in the world. [How Azure Functions is Advancing the Serverless Developer Experience](https://azure.microsoft.com/en-gb/blog/advancing-the-developer-experience-for-serverless-apps-with-azure-functions/) — Reflections on some of the recent things the Azure Functions team are doing to make the serverless developer experience better on their platform. Perhaps the biggest thing is _KEDA_, built in partnership with Red Hat, which introduces event-driven auto scaling to Kubernetes. Eduardo Laureano (Microsoft) [Intel CPUs Impacted by New 'Zombieload' Side-Channel Attack](https://www.zdnet.com/article/intel-cpus-impacted-by-new-zombieload-side-channel-attack/) — Unlike with last year’s Meltdown and Spectre, Intel is [prepared](https://www.intel.com/content/www/us/en/architecture-and-technology/mds.html) and has microcode updates rolling out as we speak. ZDNet 💻 Jobs [Senior Site Reliability Engineer - Invoca (Santa Barbara, CA or Remote)](https://www.invoca.com/company/job-listings/?gh_jid=4203792002) — Join our team of Operations Engineers deploying code to our production SaaS platform & public cloud infrastructure multiple times per day. Invoca [Find A WebOps Job on Vettery](https://www.vettery.com/tech?utm_source=newsletter&utm_medium=cooper-webopsweekly&utm_term=tech&utm_content=grouped&utm_campaign=ad-77581) — Vettery specializes in tech roles and is completely free for job seekers. Vettery 📖 Tutorials & Stories [The Parallel Streaming of Progressive Images with HTTP/2](https://blog.cloudflare.com/parallel-streaming-of-progressive-images/) — Image-optimized HTTP/2 multiplexing makes all progressive images across a page appear visually complete in half of the time. Here’s how. Andrew Galloni and Kornel Lesiński (Cloudflare) [📕 20 Patterns to Watch for in Engineering Teams](https://resources.gitprime.com/books/20-patterns/?utm_source=nl%28wow%29&utm_medium=email-nl&utm_campaign=nl%28wow%29) — Actionable insights to help you debug your development process with data. [Get your copy](https://resources.gitprime.com/books/20-patterns/?utm_source=nl%28wow%29&utm_medium=email-nl&utm_campaign=nl%28wow%29). GitPrime sponsor [6 Lessons Learnt Sending High Volumes of Emails with AWS Lambda](https://read.iopipe.com/6-lessons-learned-sending-mass-emails-with-aws-lambda-3c5e56e19571) — For those new to serverless architectures, here’s an interesting look into what went wrong, what went right, and what ‘went random’. Austin Huminski [A Review of the AZ-900 Microsoft Azure Fundamentals Exam](https://techcommunity.microsoft.com/t5/ITOps-Talk-Blog/Exam-review-AZ-900-Microsoft-Azure-Fundamentals/ba-p/565041?WT.mc_id=ITOPSTALK-reddit-abartolo) — Thoughts on what it takes to pass an official Azure certification exam. Sonia Cuff ▶[An Interview with Charity Majors on Infrastructure Engineering](https://www.maintainable.fm/episodes/charity-majors-deploys-are-just-the) — An interview with Charity Majors, CTO of Honeycomb, about infrastructure engineering and testing in production. The Maintainable Software Podcast podcast [Validating OAuth 2.0 Access Tokens with NGINX](https://www.nginx.com/blog/validating-oauth-2-0-access-tokens-nginx/) — NGINX can act as an OAuth 2.0 Relying Party, sending access tokens to the Identity Provider for validation and only proxying requests that pass the validation process. Liam Crilly (NGINX, Inc.) [How To Set Up WordPress with MySQL on Kubernetes Using Helm](https://www.digitalocean.com/community/tutorials/how-to-set-up-wordpress-with-mysql-on-kubernetes-using-helm?utm_medium=display&utm_source=paid_newsletter_cooperpress_webopsweekly&utm_campaign=K8S_Dev_Awareness_Cold_Cooperpress) DigitalOcean sponsor ▶[Discussing Facebook's Development Practices](https://softwareengineeringdaily.com/2019/05/14/facebook-developers-with-nick-schrock/) — Software Engineering Daily is a _very_ popular podcast and it’s interesting to hear Nick Schrock, an ex-Facebook engineer of some 8 years, talk about how Facebook’s engineering teams work. [Pete Hunt was also on a similar episode](https://softwareengineeringdaily.com/2019/05/13/facebook-engineering-with-pete-hunt/) earlier this week. Software Engineering Daily podcast 🛠 Code & Tools [Flipt: A Feature Flag System for Running Experiments](https://github.com/markphelps/flipt) — Add ‘feature flag’ support to your existing applications, with a simple, single UI and API. More info on [the official homepage.](https://flipt.dev/) Mark Phelps [kubernetes-rust: A Rust Client for Kubernetes](https://github.com/ynqa/kubernetes-rust) ynqa Curated by [Cooperpress](https://cooperpress.com/). [Change your email address](https://webopsweekly.com/edit_subscription/*|UID|*) or[Stop getting this newsletter](https://webopsweekly.com/leave/*|UID|*). © Cooper Press Ltd · Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom