Frigga Blogs

The change looked safe. Rename a field, tidy up a response, remove something nobody uses. I searched the repository I was working in. Nothing came back. Shipped it. The thing that breaks in this story is never in the repo you searched. It's in…

I assumed private repositories were the safe ones. Everyone I've asked assumed the same thing. GitGuardian's 2026 report says 32.2% of internal repositories contain at least one hardcoded secret , against about 6% of public ones. Roughly six…

Build goes red. You look at it for about four seconds, decide it's probably nothing, and hit rerun. It goes green. You move on. I do this. Most people I work with do this. And the uncomfortable thing is that it's a completely rational habi…

On 19 October 2025, at 11:48pm Pacific, a race condition in DynamoDB's DNS automation wiped the DNS records for the service in us-east-1. Two processes ran concurrently. A stale plan check let an older plan overwrite a newer one, cleanup automat…

At 11:20 UTC on 18 November 2025, Cloudflare's core network started failing. Within minutes X, ChatGPT, Spotify and Canva were returning errors, and a decent slice of the internet stopped working. Inside Cloudflare, the first theory was a hyper-…

There is a gap in incident response that gets almost no attention, and it sits in an awkward place. It is not detection. Monitoring is good now. It is not diagnosis either, which is where most of the recent effort has gone and where it has genuinely…

Watch the first two minutes of any investigation and you will notice that almost none of it is investigation. An alert fires for a service. Before anybody can reason about what went wrong, somebody has to establish what the service even is. Which clus…