--- title: "We're still running out of IP addresses" publication: "StatusCode Weekly" issue: 251 published_at: "2020-01-29" canonical_url: "https://weekly.statuscode.com/issues/251" --- Plus the backend technologies used by a search engine, bye to Trident, and a new Intel CPU attack. #251 — January 29, 2020 [Read on the Web](https://weekly.statuscode.com/issues/251) StatusCode Weekly Covering the week's news in software development, ops, platforms, and tooling. [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60/v1580318591/z8tqswuxunguobxymhlq.jpg)](https://www.potaroo.net/ispcol/2020-01/addr2019.html) [The State of IP Address Allocations as of 2020](https://www.potaroo.net/ispcol/2020-01/addr2019.html) — _“Can address allocation data help us to shed some light on what is happening in the larger Internet? Let’s look at what happened in 2019.”_ In short, IPv4 allocations have slowed to a crawl, _transfers_ have boomed, and the limited growth of IPv6 paints a pessimistic picture for the future. Geoff Huston (ISP Column) [GitHub Releases a Full API for GitHub Actions](https://developer.github.com/changes/2020-01-28-actions-api/) — Work with workflows, artifacts, and secrets (yep, you can now programmatically rotate them) on GitHub Actions via a new REST API. [Here’s the documentation.](https://developer.github.com/v3/actions/) GitHub [![\](https://copm.s3.amazonaws.com/1d03c55c.png)](https://try.scoutapm.com/status_code/) [Find Performance Issues FAST with ScoutAPM](https://try.scoutapm.com/status_code/) — Get to the bottom of performance issues with ScoutAPM. ScoutAPM helps track down N+1 queries, sources of memory bloat, performance abnormalities and more. Try it for free today. ScoutAPM sponsor [The Architecture of a Large-Scale Web Search Engine in 2019](https://www.0x65.dev/blog/2019-12-14/the-architecture-of-a-large-scale-web-search-engine-circa-2019.html) — We missed this at the time but it’s an interesting roundup of all the backend technologies being used at a privacy-oriented search engine provider. Cliqz [JavaScript Libraries Are Almost Never Updated Once Installed](https://blog.cloudflare.com/javascript-libraries-are-almost-never-updated/) — An analysis, based on CDNJS data, of when and if JavaScript libraries are updated after being installed onto websites (_the headline kinda gives this one away_ 😉). Zack Bloom (Cloudflare) [The Era of Microsoft's Trident Engine Ends](https://schepp.dev/posts/today-the-trident-era-ends/) — Edge moving over to using Chromium marked the _true_ end of Microsoft’s _Trident_ engine. This is a great and detailed post looking back at the IE era, its quirks, technologies, along with the ideas Microsoft put forward during it. Plenty of [good discussion on this one over at Hacker News too](https://news.ycombinator.com/item?id=22146629). Christian Schaefer [Thunderbird, Once Mozilla's Flagship Email Client, Has a New Home](https://blog.thunderbird.net/2020/01/thunderbirds-new-home/) — After a lot of doubts over its future, the still popular(ish) Thunderbird project is moving into a new subsidiary of the Mozilla Foundation, MZLA Technologies Corporation. The Mozilla Thunderbird Blog **Quick bytes:** - Is Snapchat paying developers [$500k per year](https://www.teamblind.com/post/Would-you-go-to-Snap-from-Google-both-in-NY-E8FK34gT) to put cartoon mustaches on people's faces? Apparently yes. - CacheOut is [a new speculative execution attack](https://cacheoutattack.com/) on Intel CPUs that can acquire leaked data across security boundaries. - Linode, the VPS provider, has unveiled free DDoS protection [across its network.](https://www.linode.com/press-release/linode-launches-free-advanced-ddos-protection-across-its-global-network/) - MongoDB, Inc. has [added GraphQL support](https://www.mongodb.com/blog/post/introducing-graphql-support-in-mongodb-atlas-with-stitch) to its MongoDB-powered _Stitch_ serverless dev platform. - It seems that Amazon [might be tracking every time you turn the page](https://twitter.com/adrjeffries/status/1222277544730337280) when reading on the Kindle. - [_The Developer's Guide to Content Creation_](https://www.developersguidetocontent.com/) is a new (paid) book about publishing technical content. - Russia [has blocked](https://www.reuters.com/article/us-russia-protonmail/russia-blocks-encrypted-email-service-protonmail-idUSKBN1ZS1K8) the popular ProtonMail encrypted email service. - AWS has extended the [Amazon Linux AMI end of life](https://aws.amazon.com/blogs/aws/update-on-amazon-linux-ami-end-of-life/) to December 31, 2020. - You [can now get](https://aws.amazon.com/blogs/aws/new-t3-instances-on-dedicated-single-tenant-hardware/) EC2 T3 instances on dedicated single-tenant hardware. 💻 Jobs [DevOps Engineer at X-Team (Remote)](https://x-team.com/remote-devops-engineer-jobs/?utm_source=cooperpress&utm_medium=email-ad&utm_campaign=webops) — Work with the world's leading brands, from anywhere. Travel the world while being part of the most energizing community of developers. X-Team [Find a Job Through Vettery](https://www.vettery.com/tech?utm_source=newsletter&utm_medium=cooper-webopsweekly&utm_term=tech&utm_content=grouped&utm_campaign=ad-77581) — Vettery is completely free for job seekers. Make a profile, name your salary, and connect with hiring managers from top employers. Vettery 📕 Tutorials [Anybody Can Write Good Bash (with a Little Effort)](https://blog.yossarian.net/2020/01/23/Anybody-can-write-good-bash-with-a-little-effort) — If you write any shell scripts, you should pick up a tip or two from this. William Woodruff ▶[Learn AWS Lambda From Scratch: An Egghead Collection](https://egghead.io/playlists/learn-aws-lambda-from-scratch-d29d) — 10 fast paced video lessons (totalling under half an hour) that fly through the use of AWS Lambda. The author claims _“It’s roughly enough info to pass the Lambda section of the AWS Certified Developer - Associate exam.”_ Tomasz Łakomy [The Security Engineer’s First 90 Days Checklist](https://link.sqreen.com/m0qa7Exn) — Learn how to prioritize your security efforts as the first security engineer or CISO in a startup with this checklist. Sqreen sponsor [3 Steps to Add Tests on Existing Code When You Have Short Deadlines](https://understandlegacycode.com/blog/3-steps-to-add-tests-on-existing-code-when-you-have-short-deadlines/) — A commenter over on Reddit said it best: _“It’s nice to get something helpful for those of us who work with legacy crap.”_ Nicolas Carlo [What Is DevSecOps, and How Is It Different From DevOps?](https://research.g2.com/insights/what-is-devsecops-and-how-is-it-different-from-devops) — ‘DevSecOps’ is a term that’s picking up in the development space and throws _security_ in as a key part of the ops process. Adam Crivello [Five Methods For Database Obfuscation](https://habr.com/en/company/yandex/blog/485096/) — There’s nothing like testing on true datasets but what if your dataset is full of private data? How can you create a dataset that’s ‘real’, shareable, but not a data protection liability? Anonymous 💡 Stories and Opinions [How A Kaggle Grandmaster Cheated in a $25k AI Contest with Hidden Code](https://www.theregister.co.uk/2020/01/21/ai_kaggle_contest_cheat/) — This is one of those fun but interesting stories. To sweeten a classification algorithm a developer added pre-sorted, real answers which would occasionally be chosen instead.. here’s [a technical breakdown](https://www.kaggle.com/bminixhofer/how-bestpetting-cheated) of how it worked. The Register [What Happens When a 96 Bitcoin Ransom Payment Ends Up on an Exchange?](http://jpkoning.blogspot.com/2020/01/what-happens-when-96-bitcoin-ransom.html) — The interesting tale of how a Canadian company’s insurer paid a ransom (to decrypt files after a cyber attack) in Bitcoin and how they’re trying to get the ransom back. JP Koning [Serverless Cost Optimization: Kinesis Streams vs Firehose](https://lumigo.io/blog/serverless-cost-optimization-kinesis-streams-vs-firehose/) — Serverless cost efficiency isn’t just about pay-per-use, it’s also about choosing the right service for a particular task. Uri Parush (Lumigo) [Why The TypeScript Team is using Gatsby for Its New Site](https://www.gatsbyjs.org/blog/2020-01-23-why-typescript-chose-gatsby/) — Discover why the TypeScript team uses Gatsby (a React powered site generator) and what constraints they use to make it work for their team. Orta Therox [How I Got a Lifetime Ban from AWS](https://twitter.com/mouthofmorrison/status/1222348913337946115) — Completely illustrated with Larry David GIFs, this tweet thread is billed as a ‘cautionary tale for idiots on computers’. Joe Morrison on Twitter [The Infinite Loop That Wasn't: A Holy Grail Bug Story](https://mgba.io/2020/01/25/infinite-loop-holy-grail/) Endrift ▶[Temenos: Building Serverless Banking Software at Scale](https://www.youtube.com/watch?v=mtZvA7ARepM) Amazon Web Services [From FLOPS to IOPS: The New Bottlenecks of Scientific Computing?](https://www.sigarch.org/from-flops-to-iops-the-new-bottlenecks-of-scientific-computing/) — We’re entering a world where the main bottleneck for scientific applications is I/O operations per second rather than floating point operations. ACM SIGARCH 🛠 Code and Tools [Microsoft Application Inspector: A New Source Code Analyzer](https://github.com/Microsoft/ApplicationInspector) — A software source code analysis tool that helps identify and surface well-known features and other interesting characteristics of source code to aid in determining what the software is or what it does. Microsoft [Announcing Amazon Relational Database Service (RDS) Snapshot Export to S3](https://aws.amazon.com/about-aws/whats-new/2020/01/announcing-amazon-relational-database-service-snapshot-export-to-s3/) — You can now export Amazon Relational Database Service (Amazon RDS) or Amazon Aurora snapshots to Amazon S3 as Apache Parquet, an efficient open columnar storage format for analytics. Amazon Web Services [Introducing Backup Ninja - Simple & Secure Database Backups](https://backup.ninja/?utm_campaign=Backup_Ninja_Launch&utm_content=status_code&utm_medium=Paid_Search&utm_source=banner) Backup Ninja sponsor [PostgresqlCO.NF: Postgres Configuration for Humans](https://postgresqlco.nf/en/doc/param/) — An epic resource to dig into all the different settings Postgres provides, see what they’re about, and discover further resources. Here’s [the story](https://www.ongres.com/blog/postgresqlconf-configuration-for-humans/) behind its creation. OnGres [TLDR Pages: Simplified, Community Driven `man` Pages](https://tldr.sh/) — A community effort to simplify the beloved `man` pages with practical examples. TLDR pages team [Recommending GNU Recutils](https://labs.tomasino.org/gnu-recutils/) — [GNU Recutils](https://www.gnu.org/software/recutils/) is a set of tools and libraries to access human-editable, plain text databases called ‘recfiles’. James Tomasino [query-pipe: Command-Line (ND)JSON Querying](https://github.com/paybase/qp) — A tool for filtering and transforming JSON from the command line using an SQL-like query language. Paybase [Fabio: A Fast, Zero-Conf HTTPS and TCP Load Balancing Router Managed by Consul](https://github.com/fabiolb/fabio) fabio Curated by [Cooperpress](https://cooperpress.com/). [Change your email address](https://webopsweekly.com/edit_subscription/*|UID|*) or[Stop getting this newsletter](https://webopsweekly.com/leave/*|UID|*). © Cooper Press Ltd · Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom