pertbert

That's flexible! Does this flexibility derive from have a simpler threat model at Netflix? How damaging would insider risk be?

The article mentions:

> We build packages in package groups, to take into account separate packages that need to be upgraded together. Once the whole group has been built, we run a virtualized test suite to make sure none of our core components and developer workflows are broken. Each group is tested separately with a full system installation, boot and local test suite run on that version of the operating system.

> We then proceed to carefully guide this release to the fleet utilizing SRE principles like incremental canarying and monitoring the fleet health.

When I review code I prefer to do it blind, not knowing who the author is.

This keeps me honest, and allows me to keep standards high without the author thinking I'm giving them an unfair hard time.