.tip

Jul 20, 2026 · one of the small things

The kill switch is not the rollout flag

The rollout flag from launch was set to 100 percent and forgotten, and nobody on call knew flipping it was an option. The kill switch is its own flag, named for the feature, in the runbook, with one sentence next to it saying what the customer sees when it is off.

summaries.enabled   off → the summary box does not render

A switch is only useful if the person holding it knows what happens when they use it.

reliabilityfeature-flags

Longer version: the post this came from.

~/tips/today — 2026-09-04

~cat tips/today

Session cookies: HttpOnly, Secure, SameSite=Lax

securityhttp

Three attributes, each closing a class of attack. HttpOnly keeps scripts from reading it. Secure keeps it off plain HTTP. SameSite=Lax stops it being sent on cross-site POSTs, which is most CSRF.

Set-Cookie: session=...; HttpOnly; Secure; SameSite=Lax; Path=/; Max-Age=1209600

Strict breaks arriving from an external link while logged in. Lax is the default worth keeping.

↵ open y yesterday l ls /tips

esc close