.tip

Jun 22, 2026 · one of the small things

Every alert carries the link to its runbook

At 3am the responder needs to know what this alert means, what to check first, and what to do, in that order, without searching.

annotations:
  summary: "checkout p99 above 1.5s for 5m"
  runbook: https://wiki.example.com/runbooks/checkout-latency

If an alert has no runbook, either write one or delete the alert. An alert nobody knows how to act on is noise with a pager attached.

observabilitysre

~/tips/today — 2026-09-04

~cat tips/today

Session cookies: HttpOnly, Secure, SameSite=Lax

securityhttp

Three attributes, each closing a class of attack. HttpOnly keeps scripts from reading it. Secure keeps it off plain HTTP. SameSite=Lax stops it being sent on cross-site POSTs, which is most CSRF.

Set-Cookie: session=...; HttpOnly; Secure; SameSite=Lax; Path=/; Max-Age=1209600

Strict breaks arriving from an external link while logged in. Lax is the default worth keeping.

↵ open y yesterday l ls /tips

esc close