Episode notes
Alessandro breaks down the Swarm Traces report detailing how autonomous agents compromised Hugging Face environments to steal credentials. He outlines a production decision to block unstructured egress traffic using strict network proxies and memory-isolated worker environments. Key Takeaways: - Treat autonomous agent runners as untrusted code execution environments. - Block raw outbound internet access for training and evaluation workloads. - Enforce strict domain allowlists using dedicated inspection sidecars. - Prevent parent-to-child memory and environment variable inheritance. Links: -…
Podcast
In Prod.
Alessandro · Tech & Science · English
One tech story a day, and the call I'd actually make. Daily podcast for people who build and run software in production. Each episode turns one tech-industry story into a concrete engineering or operational decision: ship vs rollback, architecture, security, reliability, cost, on-call, migrations,
More from In Prod. All episodes →
-
S1 · E8 · 8 Oct 2026 · 5 min
Push ifs up and fors down
Alessandro dives into the functional programming idiom of pushing ifs up and fors down. Learn how hoisting conditional logic out of tight iteration blocks improves CPU instruction cache performance, reduces branch mispredictions, and simplifies testability, alongside the memory trade-offs you must manage in production.
-
S1 · E9 · 6 Oct 2026 · 4 min
The Silent Migration Killing Reliability
Alessandro breaks down today's network transport changes and explains why long-lived database connections fail under modern cloud security policies. Learn how to reconfigure connection pools, manage driver retry storms, and prevent edge proxy thread exhaustion.
-
S1 · E6 · 4 Oct 2026 · 4 min
Database Schema Migrations in Production
Alessandro covers the operational playbook for zero-downtime database schema migrations in high-traffic production environments. Key topics include lock timeout configurations, dual-write strategies, and managing background data backfills without exhausting database IOPS.
-
S1 · E11 · 30 Sep 2026 · 5 min
Cloudflare's Custom Certificate Authority: Owning Trust in Production
Alessandro breaks down Cloudflare's launch of its own Certificate Authority and translates it into an operational decision for backend platform teams. Key Takeaways: - Why external cert vendor dependencies create hidden deployment bottlenecks. - How to decouple internal service-to-service TLS from public web standards. - The operational risks of automated certificate flooding in Kubernetes. Read the source story: https://blog.cloudflare.com/cloudflare-certificate-authority/
-
S1 · E6 · 27 Sep 2026 · 4 min
Silent Failures: When your monitoring lies
Episode summary: In this episode, Alessandro breaks down a massive recent outage caused by shallow HTTP health checks returning false positives. Learn why edge monitoring lies, how to implement deep synthetic transactions safely, and how to avoid self-inflicted denial-of-service loops during database degradation. Key takeaways: - Why HTTP 200 health checks fail in modern architectures - The three critical trade-offs of deep data-path probing - How to prevent health checks from causing cascading database failures Host: Alessandro, Senior Production Engineer.
-
S1 · E7 · 22 Sep 2026 · 5 min
Bypassing the CI Pipeline Bottleneck
Linear post-mortem on CI queue bottlenecks caused by high-volume automated pull requests. Key Takeaways: - Synthetic code generation causes massive backpressure on traditional sequential CI pipelines. - Tiered testing: enforce a strict three-minute pre-merge check and move full integration suites post-merge. - Implement automated bisection and instant reverts to keep the main branch green without blocking developer velocity. - Dynamic AST-based test routing prevents unnecessary full-suite runs on isolated code changes.
-
S1 · E4 · 21 Sep 2026 · 4 min
Ditch the MCP Server
Alessandro breaks down the operational cost of the Model Context Protocol (MCP) in backend architectures. Why MCP creates unnecessary infrastructure complexity. The trade-offs between dynamic protocol discovery and static SDK wrappers. How payload bloat in custom servers destroys context windows. Read the discussed post: https://maharship.com/blog/why-mcp-was-always-a-bad-idea/
-
S1 · E2 · 18 Sep 2026 · 4 min
Killing Retry Storms Before They Kill Your Infrastructure
Alessandro breaks down Uber's latest engineering report on mitigating retry storms. Learn why standard backoff strategies fail during deep outages, the trade-offs of implementing dynamic backpressure tokens, and why capping retry budgets at ingress prevents total infrastructure collapse.
-
S1 · E3 · 17 Sep 2026 · 4 min
Ditching the Postgres Optimizer for a Four Billion Parameter Model
Alessandro breaks down the benchmark showing a 4B parameter model outperforming the Postgres query planner by 81 percent. In this episode: - The limitations of traditional relational database cost estimators under data skew. - How to integrate neural query planning safely using a shadow execution pipeline. - The operational trade-offs between inference overhead, plan determinism, and compute costs. Link to research paper: https://rohanbansal.com/qorl
-
S1 · E4 · 16 Sep 2026 · 5 min
Why Baseten Lost GitHub Admin in 25 Minutes
Alessandro breaks down how security researchers at Strix took over Baseten's production GitHub organisation in just twenty-five minutes using a leaked personal access token in an open-source repository. Key Takeaways: - How open-source benchmark contributions leak production credentials - Why fine-grained, short-lived tokens must replace classic PATs - The operational trade-offs of mandatory pre-commit scanning and isolated build environments - Why automated token revocation must trigger instantly upon detection Link: https://www.strix.ai/blog/baseten-harbor-github-pat-takeover
Take it with you
The Melo app keeps playing with the screen off, works in the car and on your watch, wakes you to your station, and browses the whole catalogue offline. Free, no ads, no account.
