--- title: "Does anyone care about the OS anymore?" publication: "StatusCode Weekly" issue: 312 published_at: "2021-04-14" canonical_url: "https://weekly.statuscode.com/issues/312" --- Plus Amazon's Elasticsearch fork, how Cloudflare handles zero day vulnerabilities, and NVIDIA joins the server CPU party. | Hurrah, it's issue 312 — April 14, 2021 [Web Version](https://weekly.statuscode.com/issues/312) StatusCode Weekly What's happening in software development, ops, platforms and tools. [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60/kuagvywtuldt5qz4vlpf.jpg)](https://aws.amazon.com/blogs/opensource/introducing-opensearch/) [Introducing OpenSearch: AWS's Fork of Elasticsearch and Kibana](https://aws.amazon.com/blogs/opensource/introducing-opensearch/) — Back in January, Elastic announced [a contentious licensing change](https://www.elastic.co/blog/licensing-change) to its Elasticsearch and Kibana projects, and Amazon decided to fork them into its own ‘community driven’ project, now called OpenSearch. Amazon Web Services ['Nobody Cares About the Operating System Anymore'](https://www.lastweekinaws.com/blog/nobody-cares-about-the-operating-system-anymore/) — The most interesting opinion pieces come from people explaining things that are in plain sight but that you just didn’t notice yet. So it goes with Corey noticing that we’re rapidly entering a ‘post-OS world’ and maybe even a ‘post-processor architecture’ one too. Corey Quinn [![\](https://copm.s3.amazonaws.com/6e8556e8.png)](https://www.sleuth.io/developer-productivity-metrics?utm_source=cooperpress&utm_medium=email&utm_campaign=statuscode&utm_content=metrics) [[Guide\] The Truth About Developer Productivity Metrics](https://www.sleuth.io/developer-productivity-metrics?utm_source=cooperpress&utm_medium=email&utm_campaign=statuscode&utm_content=metrics) — Can developer productivity be measured with metrics? Yes, but there is such a thing as good and bad metrics. Here's what you need to know to avoid weaponizing metrics for performance reviews, and use them to improve software delivery process instead. Sleuth sponsor [Deno 1.9 Released](https://deno.com/blog/v1.9) — Deno is a server-side JavaScript/TypeScript runtime created by the original creator of Node.js. Compared to Node, it's more security focused, uses ES modules, and adopts a lot of browser-based APIs. The latest release adds a [native HTTP/2-compliant Web server](https://deno.com/blog/v1.9#native-http%2F2-web-server), support for `blob` and `data` URLs (working much like it does in browsers) and more. It's an ecosystem worth checking out and [this Hacker News discussion](https://news.ycombinator.com/item?id=26797557) has more. The Deno Team [How GitHub Scaled Its API with a Replicated Redis-Powered Rate Limiter](https://github.blog/2021-04-05-how-we-scaled-github-api-sharded-replicated-rate-limiter-redis/) — GitHub’s old Memcached-based rate limiter was simple but running into problems. Here’s how Redis plus some Lua scripting came to the rescue. Robert Mosolgo (GitHub) - A UK airline [had a 'serious incident'](https://www.theregister.com/2021/04/08/tui_software_mistake/) due to software treating passengers with the title of 'Miss' as children and assigning them too low a weight (the total of which is used to adjust things like fuel load and takeoff thrust). - Fast Company reports that [mobile developers are increasingly going 'web only'](https://www.fastcompany.com/90623905/ios-web-apps) to avoid app store headaches, neatly looping back to Steve Jobs' earliest ideas of using the Web for third party apps on the iPhone. - The W3C TAG really [doesn't like Google's 'first party sets' idea](https://www.theregister.com/2021/04/08/w3c_google_multple_domains/) for grouping multiple domains together to be treated as a singular first party origin. - NVIDIA has [unveiled 'Grace'](https://www.anandtech.com/show/16610/nvidia-unveils-grace-a-highperformance-arm-server-cpu-for-use-in-ai-systems), a high performance ARM-based server CPU. This attempt to branch out into the datacenter caused their share price to hit a record high. - AWS has changed [the billing granularity of Lambda@Edge](https://aws.amazon.com/about-aws/whats-new/2021/03/cloudfront-lambda-at-edge-billing-granularity/) (its CloudFront-based serverless platform) from 50ms to 1ms which could provide quite the savings for heavy users. - Microsoft has [unveiled its new Surface Laptop 4](https://blogs.windows.com/devices/2021/04/13/introducing-surface-laptop-4-and-new-accessories-for-enhanced-meeting-experiences/). # Tutorials, Opinions and Stories 📖 [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60/nvtbut3eenywt5la1zqe.jpg)](https://swagitda.com/blog/posts/security-decision-trees-with-graphviz/) [Creating Security Decision Trees with Graphviz](https://swagitda.com/blog/posts/security-decision-trees-with-graphviz/) — A walk through creating a decision tree for pragmatic threat modeling using the Graphviz graph tool (with an AWS S3 bucket containing sensitive data as an example). Kelly Shortridge [Is Amazon RDS for PostgreSQL or Amazon Aurora PostgreSQL a Better Choice for Me?](https://aws.amazon.com/blogs/database/is-amazon-rds-for-postgresql-or-amazon-aurora-postgresql-a-better-choice-for-me/) — I think there’s a lot of confusion about when Aurora or straight RDS suit the situation. Here, Amazon attempts to clarify things. Vivek Singh and Sagar Patel (AWS) [All-Star Lineup at PulumiUP - Grab Your Spot](https://www.pulumi.com/pulumi-up/?utm_source=statuscode-weekly&utm_medium=sponsored-link&utm_campaign=pulumiup) — A two-hour virtual event about cloud engineering, cloud infrastructure management, and building modern applications. Pulumi sponsor [How to Password Protect a Site with Cloudflare Workers](https://phiilu.com/password-protect-your-vercel-site-with-cloudflare-workers) — A demonstration of using Cloudflare Workers to add Basic HTTP authentication to sites even if they are hosted on a service like Vercel or Netlify. Florian Kapfenberger [The Healing Power of JavaScript](https://www.wired.com/story/healing-power-javascript-code-programming/) — This isn’t _really_ about JavaScript per se, but more about how Craig Mod, a popular writer and photographer, finds coding to be a _“therapy, an escape and a path to hope in a troubled world.”_ We could all do with more of that. Craig Mod ['Go is a Great Programming Language'](https://drewdevault.com/2021/04/02/Go-is-a-great-language.html) — _”..despite my criticisms of it, Go remains one of the best programming languages I’ve ever used, and I have a great deal of respect for it”_. Drew DeVault [The Fundamentals of Docker Image Tags](https://blog.atomist.com/docker-image-tags/) — An exploration of Docker _tags_ and the benefits, risks, and mechanics for pinning to digests to regain control of your builds. James Carnegie [Commits Are Snapshots, Not Diffs](https://github.blog/2020-12-17-commits-are-snapshots-not-diffs/) Derrick Stolee (GitHub) How Cloudflare Handles a Zero Day Vulnerability News about a [zero-day Chrome vulnerability](https://github.com/r4j0x00/exploits/commit/7ba55e5ab034d05877498e83f144e187d3ddb160) hit Hacker News yesterday and [someone asked](https://news.ycombinator.com/item?id=26786628) how platforms like Cloudflare Workers deal with such problems given they heavily rely on V8. Beautifully, the tech lead for Cloudflare Workers was reading the thread and replied: > "Within an hour of V8 pushing the fix for this, our build automation alerted me that it had picked up the patch and built a new release of the Workers Runtime for us. I clicked a button to start rolling it out. > > After quick one-click approvals from EM and SRE, the release went to canary. After running there for a short time to verify no problems, I clicked to roll it out world-wide, which is in progress now. It will be everywhere within a couple hours. Rolling out an update like this causes no visible impact to customers." > > — [Kenton Varda](https://news.ycombinator.com/item?id=26786774) (Tech Lead for Cloudflare Workers) Now that's how to do it. # Code and Tools 🔧 [Ledokku: A Web UI for All Things Dokku](https://github.com/ledokku/ledokku) — A Web-based interface for [Dokku](https://dokku.com/), a Heroku-inspired open source PaaS system. ledokku team [SQLean: All the 'Missing' SQLite Functions](https://github.com/nalgeon/sqlean) — It’s bold to suggest SQLite is ‘missing’ things, but this interesting project adds a variety of new bits and pieces including string, math, and statistical functions. Anton Zhiyanov [Book a Demo. Ship Fast. Rest Easy. LaunchDarkly](https://learn.launchdarkly.com/demo/?utm_source=cooperpress&utm_medium=display&utm_campaign=21q1-cooperpress) LaunchDarkly sponsor [Electron Boilerplate 9.0: A Boilerplate for Building Electron Apps](https://github.com/szwacz/electron-boilerplate) — All the dependencies have been brought up to date and this bring some structure and dependencies to your Electron development party. Jakub Szwacz - IBM has [announced a COBOL compiler](https://www.theregister.com/2021/04/07/ibm_cobol_x86_linux/) for Linux on x86. Want to actually _learn_ COBOL? [Start here.](https://monadical.com/posts/cobol.html) - [Cloudflare Pages is now available.](https://blog.cloudflare.com/cloudflare-pages-ga/) It's a way for developers to quickly build, host and collaborate on Jamstack sites. - [.NET 6 Preview 3](https://devblogs.microsoft.com/dotnet/announcing-net-6-preview-3/) is here. - [FreeBSD 13.0](https://www.freebsd.org/releases/13.0R/relnotes/) has been released. - [Mugo](https://benhoyt.com/writings/mugo/) is a 'toy compiler' for a subset of Go(lang) that can compile itself. - FFmpeg, everyone's favorite Swiss Army knife for multimedia, has [reached version 4.4.](http://ffmpeg.org/index.html#pr4.4) Jobs [Team Lead @ Nebulab (Remote)](https://nebulab.it/careers/?utm_source=newsletter&utm_medium=email&utm_campaign=statuscode) — Join our distributed team and build high-volume eCommerce applications in a workplace made by developers for developers. Nebulab [Remote Developer and Engineer Positions @ Kinsta](https://kinsta.com/careers/) — Whether you are an experienced JS Developer, DevOps or a SysOps Engineer you’ll find something for you at Kinsta. Kinsta 📭 **Got a new email?** You can [change your address here.](https://weekly.statuscode.com/edit_subscription/*|UID|*) --- **Bored of us?** [Click here to stop getting StatusCode Weekly.](https://weekly.statuscode.com/leave/*|UID|*) --- **Got a link for us?** Reply and tell us. We can't include everything but we'll look at anything you send. Thanks! --- **Want to sponsor?** Email `[kristina@cooperpress.com](mailto:kristina@cooperpress.com)` for details. --- Published by Cooper Press Ltd. Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom [Stop getting this newsletter.](https://weekly.statuscode.com/leave/*|UID|*)