--- title: "EU rules site owners responsible for Facebook 'Like' button data protection" publication: "StatusCode Weekly" issue: 228 published_at: "2019-08-07" canonical_url: "https://weekly.statuscode.com/issues/228" --- The latest Web operations, HTTP, and Web performance news #228 — August 7, 2019 [Read on the Web](https://webopsweekly.com/issues/228) StatusCode Covering the week's news in software development, infrastructure, ops, platforms, and performance — Formerly **Web Operations Weekly** and currently in transition. [PartiQL: A Universal, SQL-Compatible Query Language](https://aws.amazon.com/blogs/opensource/announcing-partiql-one-query-language-for-all-your-data/) — [PartiQL](https://partiql.org/) is a new query language that extends SQL to be able to support non-relational, schemaless and other data formats too. It’s open source and already in use internally in various AWS systems. One of its co-creators also created [SQL++](https://arxiv.org/abs/1405.3631) (which saw implementation via Couchbase’s N1QL) several years ago. Papakonstantinou, Goo, et al. [CapitalOne's Data Breach: What They Got Wrong (and Right)](https://www.lastweekinaws.com/blog/capitalones-capitaltwo-day/) — CapitalOne recently suffered [a _huge_ data breach](https://www.bloomberg.com/news/articles/2019-07-29/capital-one-data-systems-breached-by-seattle-woman-u-s-says) at the hands of a former AWS employee which involved a variety of S3 buckets being scanned and downloaded. Here’s [some further technical explanation.](https://start.jcolemorrison.com/the-technical-side-of-the-capital-one-aws-security-breach/) Corey Quinn [![\](https://copm.s3.amazonaws.com/227c785b.jpg)](https://try.datree.io/soc2-compliance-git-guide?utm_source=cooperpress&utm_medium=webopsweekly) [Git Best Practices for SOC 2 Compliance Quick Wins](https://try.datree.io/soc2-compliance-git-guide?utm_source=cooperpress&utm_medium=webopsweekly) — A practical list of Git best practices for SOC 2 compliance, written from a developer's perspective. Learn how implementing them can help you satisfy SOC 2 requirements, while improving developer productivity. Datree.io sponsor [Cloudflare (and Others) Terminate 8Chan's Hosting Services](https://blog.cloudflare.com/terminating-service-for-8chan/) — _8chan_ is/was a weakly moderated message board which served as a base for numerous disturbing communities, some of which have been implicated in recent tragedies. 8chan used Cloudflare as a CDN and for DDOS protection, but Cloudflare, well known for its neutrality as a service provider, has had enough. A company that provided servers that 8chan was hosted on has [also pulled the plug.](https://www.theverge.com/2019/8/5/20754943/8chan-epik-offline-voxility-service-cutoff-hate-speech-ban) Matthew Prince (CloudFlare) [Amazon Won't Spin Off AWS, and That's Too Bad for AWS](https://forrestbrazeal.com/2019/07/24/cloud-irregular-amazon-wont-spin-off-aws-and-thats-too-bad-for-aws/?ck_subscriber_id=512841633) — Many customers are not using AWS the way it’s designed to be used, as a holistic, deeply integrated platform, and the looming shadow of Amazon is the reason why. Forrest Brazeal [RTB RIP? The Writing Could Be On The Wall For Real-Time Bidding In Europe](https://adexchanger.com/privacy/rtb-rip-the-writing-could-be-on-the-wall-for-real-time-bidding-in-europe/) — Real-time bidding (RTB) is a technique in which Web advertising inventory is bought and sold via instantaneous auctions, but with laws like GDPR, its days could be numbered. Allison Schiff **Quick bytes:** - The EU rules that [site owners are responsible](https://www.euractiv.com/section/digital/news/sites-using-facebook-like-button-liable-for-data-eu-court-rules/) for data transfers involved when using Facebook 'Like' buttons on their sites. Time to remove those from your sites then! - From October 1, 2019, Microsoft's licensing terms will [impact users using on-prem services](https://www.microsoft.com/en-us/licensing/news/updated-licensing-rights-for-dedicated-cloud) on 'dedicated hosted cloud services' (e.g. AWS). - Toshiba has [introduced a SD card-_esque_ form factor](https://www.anandtech.com/show/14711/toshiba-introduces-new-tiny-nvme-ssd-form-factor) for NVMe SSDs. Maybe we'll be popping our hard disks in and out in future. - AWS has [added machine-learning capabiities](https://aws.amazon.com/blogs/aws/amplify-framework-update-quickly-add-machine-learning-capabilities-to-your-web-and-mobile-apps/) into its Amplify framework (which leans upon other AWS services in a developer friendly way). - Perl's CPAN is experiencing [a serious drop in uploads](https://perlancar.wordpress.com/2019/08/01/dwindling-cpan-releases/) and module releases after peaking in 2014. - Someone has come up with a clever [software-based solution](https://github.com/aahung/Unshaky) for people suffering from MacBook Pro 'double keypresses'. - Germans are getting [sick of their 'slow poke' Internet.](https://www.wsj.com/articles/germans-grow-frustrated-with-their-slow-poke-internet-11565002666?mod=rsswn) - Yahoo (yes, Yahoo!) is working on [new ways to process and deal with email.](https://www.theatlantic.com/technology/archive/2019/08/yahoo-mails-plan-to-fix-email-make-computers-read-it/595183/) 💻 Jobs [DevOps Engineer at X-Team (Remote)](https://x-team.com/remote-devops-engineer-jobs/?utm_source=cooperpress&utm_medium=email-ad&utm_campaign=webops) — Join the most energizing community for developers. Work from anywhere with the world's leading brands. X-Team [WebOps Developers Are in Demand on Vettery](https://www.vettery.com/tech?utm_source=newsletter&utm_medium=cooper-webopsweekly&utm_term=tech&utm_content=grouped&utm_campaign=ad-77581) — Ready for a bold career move? Make a free profile, name your salary, and connect with hiring managers from top employers today. Vettery 💬 Stories and Opinions [All The Best Engineering Advice I Stole From Non-Technical People](https://t.co/jolD7pN7OG) — Some interesting bits and pieces in here. If you like stuff like this, check out our [Code Wisdom Twitter account](https://twitter.com/codewisdom) as well :-) Marianne Bellotti [A History of Amazon Web Services](https://www.awsgeek.com/pages/AWS-History/) — The visualization is not the best, but this is a pretty neat list of AWS’s almost 150 (yes!) services and when they were first announced and released. Jerry Hargrove [Chaos Conf Is Back](https://chaosconf.io/?utm_medium=cpm&utm_source=WebOpsWeekly&utm_content=20190807&utm_campaign=2019_Cooperpress) — Now in its second year, Chaos Conf is a must-attend for anyone interested in Chaos Engineering and resilience. Gremlin sponsor [How I Finally Won My Name from Domain Squatters After 9 Years of Waiting](https://jerryalex.com/how-i-finally-won-my-name-from-domain-squatters-after-9-years-of-waiting/) — If, like me, you take a special interest in domain names (and buying too many of them) this tale of woe-made-good will be up your street. Jerry Alex [Why I Turned Down an AWS Job Offer](https://www.lastweekinaws.com/blog/why-i-turned-down-an-aws-job-offer/) — _“I once turned down a job offer from AWS, who told me my reasoning was preposterous. Last week they did exactly what I was afraid of.”_ Corey Quinn [How TCP Segment Size Can Affect Application Traffic Flow](https://t.co/XFg496O5Wl) — I doubt many of us are working with firewalls down at such a low level, but an interesting dig into the nitty gritty of TCP nonetheless. Shashank Suresh Kumar (Walmart Labs) [Don’t Underestimate Grep Based Code Scanning](https://littlemaninmyhead.wordpress.com/2019/08/04/dont-underestimate-grep-based-code-scanning/) — When it comes to scouring source code for security issues, a naive approach can get you a rather long way.. Crazy Contini [How CircleCI Processes Over 30 Million Builds Per Month](https://stackshare.io/circleci/update-how-circleci-processes-over-30-million-builds-per-month) StackShare 📖 Tutorials ▶[PID Loops and the Art of Keeping Systems Stable](https://www.infoq.com/presentations/pid-loops/) — A developer involved in building EC2, S3, and other AWS services shows what PID loops (essentially feedback and control loops - _nothing to do with process IDs!_) look like in the context of modern systems, and how exponential backoff, flow-control, and other techniques can be wielded to build self-healing systems. Colm MacCárthaigh ▶[What is Observability and How to Measure the Quality of Microservices](https://semaphoreci.com/blog/observability-measuring-microservices) — A 35 minute interview with Charity Majors of Honeycomb on observability and going beyond logs and dashboards to better understand the systems we build. Charity Majors and Darko Fabijan podcast [Picture Perfect: How JPEG EXIF Data Hides Malware](https://umbrella.cisco.com/blog/2019/07/24/picture-perfect-how-jpg-exif-data-hides-malware/) — The metadata stored inside JPEG images isn’t an obvious attack vector.. which is partly what makes it a dangerous one. Shyam Sundar Ramaswami 🛠 Code and Tools [ipify: A Simple Public IP Address API](https://www.ipify.org/) — A free and open service to quickly grab your public-facing IP address in various formats. Randall Degges [Seashells: Pipe Output from CLI Programs to the Web in Real Time](https://seashells.io/) — Keep the security implications in mind, of course. Anish Athalye [Test Drive GoCD in Minutes](https://www.gocd.org/test-drive-gocd.html?utm_campaign=gocd_test_drive&utm_medium=email&utm_source=cooperpress_webopsweekly&utm_content=test_drive&utm_term=) ThoughtWorks GoCD sponsor [LF: A Fully Decentralized, Fully Replicated Key/Value Store](https://github.com/zerotier/lf) — It’s billed as ‘beta’ software, but this is an interesting experiment in creating a fast data store for ‘small but critical’ pieces of information (think etcd but suitable for open, decentralized systems). ZeroTier, Inc. [Gitea 1.9.0 Released](https://blog.gitea.io/2019/07/gitea-1.9.0-is-released/) — This self-hosted Git service, written in Go, has just reached version 1.9.0. It contains various security fixes that could not be backported to 1.8 — as such, updating is strongly recommended. Gitea [Artichoke Ruby Playground: A New Ruby Interpreter](https://artichoke.github.io/artichoke/) — Artichoke Ruby is a Ruby interpreter built in Rust ([GitHub repo](https://github.com/artichoke/artichoke)). They’ve released a cool in-browser playground for playing with it and it has some exciting potential usages given it can compile to WebAssembly. Artichoke Curated by [Cooperpress](https://cooperpress.com/). [Change your email address](https://webopsweekly.com/edit_subscription/*|UID|*) or[Stop getting this newsletter](https://webopsweekly.com/leave/*|UID|*). © Cooper Press Ltd · Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom