January 10, 2025: The Friday Retro

Let's take a look back at all of the DevOps things from this week.

This week is mostly a continuation of coming back from break. For most of us the normal code freezes are thawing and we are starting to work towards things that need to happen.

Overall things that have been popping up for me are around some various security and mis-configuration issues. Notable License Plate Readers leading feeds.

License Plate Readers Are Leaking Real-Time Video Feeds and Vehicle Data

Misconfigured license-plate-recognition systems reveal the livestreams of individual cameras and the wealth of data they collect about every vehicle that passes by them.

WIREDMatt Burgess

This is a super interesting thing to see and feels like it continues on with the old problem of people installing cameras in their house on the internet with default credentials. However this is always a good reminder to check your configs, but also attempt to access your data from the outside and make sure that they are working as you expect them to.

Checking in on OpenTofu we do see they are releasing their 1.9.0 Beta:

Get ready for OpenTofu Beta 1.9.0 | OpenTofu

Hey there, OpenTofu community! We’ve been working hard to refine the 1.9.0-alpha2 with your feedback! A few rough edges have been polished and a few new features have been added.

Manifesto

I am excited to see an exclude flag. I use the target flag regularly in Terraform, but most often it is because I need to skip one thing. Ultimately the debate will never be done for whether we should or shouldn't do that, but ultimately it is what it is and sometimes you have to move forward with things.

This is a short one, but things should be getting a little more exciting as the year picks up. Curious to see where the security and the DevOps things go this year.