Egregoros

@sun Sadly I had to test in production a _lot_ in a previous job.

But our way of testing in production was doing a full release process for the change (which was gated by a condition), then deploying the change for a small percentage of users or requests, and evaluating metrics before going higher.

Together with realtime analysis tools for those metrics and tools for emergency rollbacks of the changes.

Database commands OTOH always had to be executed on a dev instance if applicable, otherwise on a temp database with synthetic data first. Before they hit production, a human needed to be convinced that the commands indeed are harmless (with outcome in the dev or temp environment as evidence).

Doesn't mean accidents don't happen. But none as big as this one.

@toiletpaper Meanwhile Wikipedia and movies tell you everything you'd need to know to build your own nuke.

The hard part isn't the design of it - the hard part is obtaining the materials, and of course building such a large and heavy thing in the first place, as you need a quite strong (and radially symmetric) explosion to suddenly push it together to set off the chain reaction.

As such, _every_ country is "one year apart from building a nuke". The knowledge is there, so once one can obtain the material, it's just a matter of time.

Oddly though, this fact is only ever brought up for _some_ nations...