This article explores the essential competencies, coding standards, risk‑management practices, and collaborative strategies that script developers need to excel in modern digital operations, offering practical guidance on fundamentals, readability, security, logging, deployment, and teamwork.
Amid economic growth and frequent continuity incidents, major internet firms are redefining SRE roles, emphasizing cost reduction, system resilience, risk management, AI‑driven operations, and close collaboration with development teams, as revealed by a detailed analysis of recent job postings from Ant Group, Alibaba, ByteDance and others.
At the 2023 GOPS Global Operations Conference, China International Capital Corporation (CICC) showcased its successful DevSecOps Level‑2 assessments for two major projects, revealing detailed cultural, process, and technical practices that elevated its security posture and set a benchmark for the industry.
This article describes how Industrial and Commercial Bank of China tackled rising software vulnerabilities by establishing a unified code‑scanning center, integrating static, supply‑chain, and dynamic analysis tools, standardizing rules, and delivering one‑stop services that have scanned over 3.1 billion lines of code across the bank.
The article emphasizes that operations teams must treat data with reverence, outlining comprehensive backup strategies, routine file‑system maintenance, database and big‑data safeguards, disciplined release processes, and meticulous change‑management practices to mitigate risks and ensure system stability.
China’s new AI model risk‑governance maturity assessment, unveiled at the 2021 GOLF+ IT New Governance Forum, showcases regulatory‑driven standards, highlights Du Xiaoman Financial’s successful evaluation, and outlines a comprehensive framework that enterprises can adopt to ensure safe, fair, and compliant AI deployments.
GuoXin Securities' GoldSun platform passed the CAICT DevSecOps Level‑2 security and risk management assessment, showcasing how standardization, tool empowerment, and a collaborative DevOps culture can elevate a financial app's security posture to an advanced domestic level.
This article explores how Google Site Reliability Engineers manage service reliability by balancing risk, cost, and business goals, using metrics like unplanned downtime, availability formulas, and risk tolerance to set realistic SLOs for both consumer and infrastructure services.
This article explains the concept of precise operations, detailing how integrating business demand as a variable can make IT maintenance more proactive, value‑driven, and synchronized with business needs, and outlines a step‑by‑step framework with real‑world examples.
Dewu’s capital‑loss prevention framework embeds risk assessment and technical safeguards—such as idempotency, distributed consistency, and active‑active multi‑region design—into architecture, organizes three defensive lines (development, QA, SRE), and employs real‑time, near‑real‑time, and offline verification plus regular drills, while advancing automated analysis and intelligent scaling.
Technical debt—ranging from low‑level design flaws and inadequate testing to strategic shortcuts and evolving third‑party dependencies—accumulates when urgent product demands bypass best practices, leading to higher costs, slower delivery, and poorer quality, so teams must make debt visible, enforce strong completion criteria, and allocate regular sprint capacity to prioritize, refactor, and repay high‑interest debt while recognizing when legacy code can be retired.
By incrementally routing module‑specific requests through Nginx to a new static front‑end while keeping backward‑compatible APIs, the Vivo Mall team transformed a monolithic 2015 platform into a fully separated architecture, achieving over tenfold front‑end release speed, doubled development efficiency, and a solid foundation for multi‑channel expansion.
Baidu’s risk‑driven delivery system applies a machine‑learning quality‑assessment model that automatically identifies, controls, and decides testing risks across over 50 features, enabling precise test selection, intercepting hundreds of bugs, cutting test waiting time from 50 to 2 hours, and paving the way toward fully automated intelligent testing.
This article explains the concept of high availability, introduces the dispersal principle, demonstrates its application in microservice architectures and distributed storage, and outlines the benefits such as improved reliability, scalability, fault tolerance, and reduced single‑point failures.
This article explores project management as a disciplined approach applicable to all endeavors, using football as an analogy to explain teamwork, communication strategies, risk management, and the importance of shared goals in achieving project success.
BytePush introduces a quality assurance platform that automates risk detection, streamlines QA and R&D collaboration through customizable cards, database ORM improvements, and a three‑stage evolution toward intelligent alerts, saving manpower and improving release quality.
This article introduces essential project management concepts, including the five process groups, demand review, risk identification, scheduling, and reporting, to help software developers improve coordination, communication, and overall efficiency in their development workflows.
This article explains the importance of security testing, outlines where to start, and details a step‑by‑step security testing workflow covering requirement analysis, static code scanning, third‑party component checks, data masking, permission checks, XSS, SQL injection, privilege escalation, file upload/download, server port scanning, and business‑specific test cases.
This article explains core project‑management concepts—team collaboration, clear boundaries, effective communication, and risk handling—using football analogies to illustrate how project managers can lead multi‑disciplinary teams toward successful outcomes.
The article explains the three‑entity (customer, user, account) account model, its architectural layout, and how it supports diverse fintech scenarios such as marketing, risk control, intra‑ and inter‑business line operations, and external service provisioning.