<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:video="http://www.google.com/schemas/sitemap-video/1.1">
<url>
<loc>https://thepointoffailure.com</loc>
<lastmod>2026-09-26T23:51:54.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>1</priority>
</url>
<url>
<loc>https://thepointoffailure.com/episodes</loc>
<lastmod>2026-09-26T23:51:54.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://thepointoffailure.com/about</loc>
<lastmod>2026-09-19</lastmod>
<changefreq>yearly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://thepointoffailure.com/privacy</loc>
<lastmod>2026-08-29</lastmod>
<changefreq>yearly</changefreq>
<priority>0.2</priority>
</url>
<url>
<loc>https://thepointoffailure.com/terms</loc>
<lastmod>2026-08-29</lastmod>
<changefreq>yearly</changefreq>
<priority>0.2</priority>
</url>
<url>
<loc>https://thepointoffailure.com/episodes/020-entirely-preventable</loc>
<video:video>
<video:title>Episode 20: Entirely Preventable</video:title>
<video:thumbnail_loc>https://i.ytimg.com/vi/xzzInh47TTA/maxresdefault.jpg</video:thumbnail_loc>
<video:description>On 7 March 2017 a critical Apache Struts vulnerability was disclosed with a patch the same day. Equifax circulated the alert but never patched the one internet facing system that needed it, neither scan run to find that system detected it, and the appliance that should have inspected the traffic had been blind for nineteen months behind an expired certificate. Attackers were inside for 76 days.</video:description>
<video:player_loc>https://www.youtube-nocookie.com/embed/xzzInh47TTA</video:player_loc>
<video:duration>159</video:duration>
<video:publication_date>2026-09-26T23:51:54.000Z</video:publication_date>
<video:family_friendly>yes</video:family_friendly>
<video:live>no</video:live>
<video:uploader info="https://thepointoffailure.com/about">The Point of Failure</video:uploader>
</video:video>
<lastmod>2026-09-26T23:51:54.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://thepointoffailure.com/episodes/019-the-morning-the-internet-s-address-book-failed</loc>
<video:video>
<video:title>Episode 19: The Morning the Internet's Address Book Failed</video:title>
<video:thumbnail_loc>https://i.ytimg.com/vi/GgEeIl0qIYw/maxresdefault.jpg</video:thumbnail_loc>
<video:description>On 19 and 20 October 2025 a latent race condition between two components of AWS's DNS automation left the DynamoDB endpoint in us-east-1 with an empty DNS record. Everything that needed that database could no longer resolve it, AWS's own systems included, and the automation was blocked from applying any further update until operators intervened by hand.</video:description>
<video:player_loc>https://www.youtube-nocookie.com/embed/GgEeIl0qIYw</video:player_loc>
<video:duration>139</video:duration>
<video:publication_date>2026-09-24T03:38:48.000Z</video:publication_date>
<video:family_friendly>yes</video:family_friendly>
<video:live>no</video:live>
<video:uploader info="https://thepointoffailure.com/about">The Point of Failure</video:uploader>
</video:video>
<lastmod>2026-09-24T03:38:48.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://thepointoffailure.com/episodes/018-the-bank-that-lost-its-customers-money-for-a-month</loc>
<video:video>
<video:title>Episode 18: The Bank That Lost Its Customers' Money for a Month</video:title>
<video:thumbnail_loc>https://i.ytimg.com/vi/8hUie2GO1gY/maxresdefault.jpg</video:thumbnail_loc>
<video:description>In June 2012 an upgrade to the batch scheduler at RBS was backed out along a path nobody had tested, and the two versions turned out to be incompatible. Jobs stopped reaching the overnight queues, the backlog compounded night after night, and at least 6.5 million customers of RBS, NatWest and Ulster Bank lost reliable access to their money, some of them for weeks.</video:description>
<video:player_loc>https://www.youtube-nocookie.com/embed/8hUie2GO1gY</video:player_loc>
<video:duration>101</video:duration>
<video:publication_date>2026-09-24T03:38:15.000Z</video:publication_date>
<video:family_friendly>yes</video:family_friendly>
<video:live>no</video:live>
<video:uploader info="https://thepointoffailure.com/about">The Point of Failure</video:uploader>
</video:video>
<lastmod>2026-09-24T03:38:15.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://thepointoffailure.com/episodes/017-sixteen-hours-of-tay</loc>
<video:video>
<video:title>Episode 17: Sixteen Hours of Tay</video:title>
<video:thumbnail_loc>https://i.ytimg.com/vi/RP5H4ezc8BM/maxresdefault.jpg</video:thumbnail_loc>
<video:description>On 23 March 2016 Microsoft released Tay, a chatbot designed to learn from the people who talked to it, onto Twitter. Within hours a coordinated group exploited that design and a repeat after me function to steer it into racist and offensive posts, and Microsoft took it offline about sixteen hours after release.</video:description>
<video:player_loc>https://www.youtube-nocookie.com/embed/RP5H4ezc8BM</video:player_loc>
<video:duration>143</video:duration>
<video:publication_date>2026-09-20T20:54:32.000Z</video:publication_date>
<video:family_friendly>yes</video:family_friendly>
<video:live>no</video:live>
<video:uploader info="https://thepointoffailure.com/about">The Point of Failure</video:uploader>
</video:video>
<lastmod>2026-09-20T20:54:32.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://thepointoffailure.com/episodes/016-the-rocket-that-lasted-37-seconds</loc>
<video:video>
<video:title>Episode 16: The Rocket That Lasted 37 Seconds</video:title>
<video:thumbnail_loc>https://i.ytimg.com/vi/iy-vjB73bVo/maxresdefault.jpg</video:thumbnail_loc>
<video:description>On 4 June 1996 the first Ariane 5 was destroyed less than a minute into its maiden flight. An alignment routine inherited from Ariane 4, with no purpose once the rocket left the pad, converted a horizontal velocity value too large for a 16 bit integer, and the backup unit ran the same software and had already failed the same way.</video:description>
<video:player_loc>https://www.youtube-nocookie.com/embed/iy-vjB73bVo</video:player_loc>
<video:duration>125</video:duration>
<video:publication_date>2026-09-19T07:34:25.000Z</video:publication_date>
<video:family_friendly>yes</video:family_friendly>
<video:live>no</video:live>
<video:uploader info="https://thepointoffailure.com/about">The Point of Failure</video:uploader>
</video:video>
<lastmod>2026-09-19T07:34:25.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://thepointoffailure.com/episodes/015-the-ai-that-deleted-production-and-then-lied-about-it</loc>
<video:video>
<video:title>Episode 15: The AI That Deleted Production (And Then Lied About It)</video:title>
<video:thumbnail_loc>https://i.ytimg.com/vi/p4OFY_LGYBA/maxresdefault.jpg</video:thumbnail_loc>
<video:description>In July 2025 an AI coding agent deleted a live production database during a code freeze, then told the user the data could not be restored. A rollback worked. Replit called the deletion unacceptable, refunded the user and separated development from production databases by default.</video:description>
<video:player_loc>https://www.youtube-nocookie.com/embed/p4OFY_LGYBA</video:player_loc>
<video:duration>129</video:duration>
<video:publication_date>2026-09-14T12:25:51.000Z</video:publication_date>
<video:family_friendly>yes</video:family_friendly>
<video:live>no</video:live>
<video:uploader info="https://thepointoffailure.com/about">The Point of Failure</video:uploader>
</video:video>
<lastmod>2026-09-14T12:25:51.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://thepointoffailure.com/episodes/014-the-power-cut-in-ghana-that-saved-global-shipping</loc>
<video:video>
<video:title>Episode 14: The Power Cut in Ghana That Saved Global Shipping</video:title>
<video:thumbnail_loc>https://i.ytimg.com/vi/yYkoVtstQTI/maxresdefault.jpg</video:thumbnail_loc>
<video:description>On 27 June 2017 the NotPetya malware destroyed Maersk's global network within minutes, including every domain controller. As Wired reported, one copy survived in the company's Ghana office, offline after a power cut, and it seeded a rebuild the company put at about ten days.</video:description>
<video:player_loc>https://www.youtube-nocookie.com/embed/yYkoVtstQTI</video:player_loc>
<video:duration>128</video:duration>
<video:publication_date>2026-09-14T00:10:47.000Z</video:publication_date>
<video:family_friendly>yes</video:family_friendly>
<video:live>no</video:live>
<video:uploader info="https://thepointoffailure.com/about">The Point of Failure</video:uploader>
</video:video>
<lastmod>2026-09-14T00:10:47.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://thepointoffailure.com/episodes/013-the-fan-who-fixed-a-billion-dollar-game</loc>
<video:video>
<video:title>Episode 13: The Fan Who Fixed a Billion Dollar Game</video:title>
<video:thumbnail_loc>https://i.ytimg.com/vi/F0MacjkDjVg/maxresdefault.jpg</video:thumbnail_loc>
<video:description>For seven years GTA Online could take minutes to load. In 2021 a programmer working without the source code traced most of the wait on his PC to one in-game item list being read inefficiently. Rockstar confirmed it, shipped a fix for the PC version and paid a bounty.</video:description>
<video:player_loc>https://www.youtube-nocookie.com/embed/F0MacjkDjVg</video:player_loc>
<video:duration>122</video:duration>
<video:publication_date>2026-09-13T15:53:17.000Z</video:publication_date>
<video:family_friendly>yes</video:family_friendly>
<video:live>no</video:live>
<video:uploader info="https://thepointoffailure.com/about">The Point of Failure</video:uploader>
</video:video>
<lastmod>2026-09-13T15:53:17.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://thepointoffailure.com/episodes/012-the-expired-certificate-that-silenced-11-countries</loc>
<video:video>
<video:title>Episode 12: The Expired Certificate That Silenced 11 Countries</video:title>
<video:thumbnail_loc>https://i.ytimg.com/vi/Z2hj49kU56Y/maxresdefault.jpg</video:thumbnail_loc>
<video:description>On 6 December 2018, an expired certificate in Ericsson core-network software disrupted operators across 11 countries. O2 and SoftBank were among the networks affected by the same dated dependency.</video:description>
<video:player_loc>https://www.youtube-nocookie.com/embed/Z2hj49kU56Y</video:player_loc>
<video:duration>100</video:duration>
<video:publication_date>2026-09-10T02:18:00.000Z</video:publication_date>
<video:family_friendly>yes</video:family_friendly>
<video:live>no</video:live>
<video:uploader info="https://thepointoffailure.com/about">The Point of Failure</video:uploader>
</video:video>
<lastmod>2026-09-10T02:18:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://thepointoffailure.com/episodes/011-the-14-year-old-who-found-apple-s-bug-and-couldn-t-get-apple</loc>
<video:video>
<video:title>Episode 11: The 14 Year Old Who Found Apple's Bug (And Couldn't Get Apple to Listen)</video:title>
<video:thumbnail_loc>https://i.ytimg.com/vi/mjrPmfw3XYQ/maxresdefault.jpg</video:thumbnail_loc>
<video:description>A teenager discovered that Group FaceTime could transmit audio before a call was accepted. His family struggled to report it before it became public. Apple disabled the feature and fixed the call-state logic.</video:description>
<video:player_loc>https://www.youtube-nocookie.com/embed/mjrPmfw3XYQ</video:player_loc>
<video:duration>109</video:duration>
<video:publication_date>2026-09-09T10:50:32.000Z</video:publication_date>
<video:family_friendly>yes</video:family_friendly>
<video:live>no</video:live>
<video:uploader info="https://thepointoffailure.com/about">The Point of Failure</video:uploader>
</video:video>
<lastmod>2026-09-09T10:50:32.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://thepointoffailure.com/episodes/010-the-disaster-that-never-happened</loc>
<video:video>
<video:title>Episode 10: The Disaster That Never Happened</video:title>
<video:thumbnail_loc>https://i.ytimg.com/vi/80onoCAOZJE/maxresdefault.jpg</video:thumbnail_loc>
<video:description>Two-digit years made the millennium rollover a real software risk. Years of remediation and testing helped keep the disruption limited, leaving successful prevention looking like an unnecessary warning.</video:description>
<video:player_loc>https://www.youtube-nocookie.com/embed/80onoCAOZJE</video:player_loc>
<video:duration>107</video:duration>
<video:publication_date>2026-09-08T20:13:01.000Z</video:publication_date>
<video:family_friendly>yes</video:family_friendly>
<video:live>no</video:live>
<video:uploader info="https://thepointoffailure.com/about">The Point of Failure</video:uploader>
</video:video>
<lastmod>2026-09-08T20:13:01.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://thepointoffailure.com/episodes/009-38-minutes-of-this-is-not-a-drill</loc>
<video:video>
<video:title>Episode 09: 38 Minutes of 'This Is Not a Drill'</video:title>
<video:thumbnail_loc>https://i.ytimg.com/vi/fLssMse1IbA/maxresdefault.jpg</video:thumbnail_loc>
<video:description>On 13 January 2018, Hawaii sent a false ballistic missile alert during a drill. Confusing procedures and inadequate safeguards let it through; the corrective wireless alert took 38 minutes.</video:description>
<video:player_loc>https://www.youtube-nocookie.com/embed/fLssMse1IbA</video:player_loc>
<video:duration>100</video:duration>
<video:publication_date>2026-09-07T20:01:00.000Z</video:publication_date>
<video:family_friendly>yes</video:family_friendly>
<video:live>no</video:live>
<video:uploader info="https://thepointoffailure.com/about">The Point of Failure</video:uploader>
</video:video>
<lastmod>2026-09-07T20:01:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://thepointoffailure.com/episodes/008-sell-1-share-or-610-000</loc>
<video:video>
<video:title>Episode 08: Sell 1 Share... or 610,000</video:title>
<video:thumbnail_loc>https://i.ytimg.com/vi/KZC2IoQQQY0/maxresdefault.jpg</video:thumbnail_loc>
<video:description>The order was for far more shares than J-Com had in existence. A warning was shown and overridden, the exchange accepted the order, and repeated cancellation attempts failed because of a flaw in the exchange's trading system. Mizuho's loss ran to about 40.7 billion yen, and Japanese courts later held the exchange partly liable for the system defect.</video:description>
<video:player_loc>https://www.youtube-nocookie.com/embed/KZC2IoQQQY0</video:player_loc>
<video:duration>102</video:duration>
<video:publication_date>2026-09-06T16:22:59.000Z</video:publication_date>
<video:family_friendly>yes</video:family_friendly>
<video:live>no</video:live>
<video:uploader info="https://thepointoffailure.com/about">The Point of Failure</video:uploader>
</video:video>
<lastmod>2026-09-06T16:22:59.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://thepointoffailure.com/episodes/007-the-typo-that-broke-the-internet</loc>
<video:video>
<video:title>Episode 07: The Typo That Broke the Internet</video:title>
<video:thumbnail_loc>https://i.ytimg.com/vi/QMjusfXFTtI/maxresdefault.jpg</video:thumbnail_loc>
<video:description>A debugging command aimed at the S3 billing subsystem was entered with an incorrect input and removed a much larger set of servers than intended, including servers behind two critical subsystems in US-EAST-1. The index subsystem had not been fully restarted in years and the restart took hours. AWS published the account and rebuilt the tool so the same removal could not happen again.</video:description>
<video:player_loc>https://www.youtube-nocookie.com/embed/QMjusfXFTtI</video:player_loc>
<video:duration>98</video:duration>
<video:publication_date>2026-09-04T18:47:26.000Z</video:publication_date>
<video:family_friendly>yes</video:family_friendly>
<video:live>no</video:live>
<video:uploader info="https://thepointoffailure.com/about">The Point of Failure</video:uploader>
</video:video>
<lastmod>2026-09-04T18:47:26.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://thepointoffailure.com/episodes/006-the-company-that-locked-itself-out-of-its-own-building</loc>
<video:video>
<video:title>Episode 06: The Company That Locked Itself Out of Its Own Building</video:title>
<video:thumbnail_loc>https://i.ytimg.com/vi/wFWfVxX6i3E/maxresdefault.jpg</video:thumbnail_loc>
<video:description>A command meant to audit backbone capacity disconnected Facebook's data centers from each other, and an audit tool built to block exactly that command failed to. The DNS servers that could no longer reach those data centers withdrew their own BGP routes, so Facebook, Instagram and WhatsApp had no address for about six hours. The recovery ran on the same infrastructure.</video:description>
<video:player_loc>https://www.youtube-nocookie.com/embed/wFWfVxX6i3E</video:player_loc>
<video:duration>104</video:duration>
<video:publication_date>2026-09-03T10:38:16.000Z</video:publication_date>
<video:family_friendly>yes</video:family_friendly>
<video:live>no</video:live>
<video:uploader info="https://thepointoffailure.com/about">The Point of Failure</video:uploader>
</video:video>
<lastmod>2026-09-03T10:38:16.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://thepointoffailure.com/episodes/005-the-video-game-plague-that-scientists-still-study</loc>
<video:video>
<video:title>Episode 05: The Video Game Plague That Scientists Still Study</video:title>
<video:thumbnail_loc>https://i.ytimg.com/vi/IXtm7CZ9moE/maxresdefault.jpg</video:thumbnail_loc>
<video:description>In 2005, Corrupted Blood was meant to remain inside World of Warcraft's Zul'Gurub raid. Pets carried it out after being dismissed and resummoned, so it spread through cities, defeated a voluntary quarantine, and exposed the behavior an epidemic model needs to account for.</video:description>
<video:player_loc>https://www.youtube-nocookie.com/embed/IXtm7CZ9moE</video:player_loc>
<video:duration>95</video:duration>
<video:publication_date>2026-09-01T18:27:42.000Z</video:publication_date>
<video:family_friendly>yes</video:family_friendly>
<video:live>no</video:live>
<video:uploader info="https://thepointoffailure.com/about">The Point of Failure</video:uploader>
</video:video>
<lastmod>2026-09-01T18:27:42.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://thepointoffailure.com/episodes/004-the-bank-that-sent-900-million-by-accident</loc>
<video:video>
<video:title>Episode 04: The Bank That Sent $900 Million by Accident</video:title>
<video:thumbnail_loc>https://i.ytimg.com/vi/EmXJQmZ5d6k/maxresdefault.jpg</video:thumbnail_loc>
<video:description>On 11 August 2020 Citibank, the administrative agent on a syndicated term loan to Revlon, intended to wire approximately $7.8 million of interest and sent the principal as well, a payment its own notice recorded as 893,944,008.52. A maker, a checker and an approver had each passed the transaction. Lenders holding roughly $500 million refused to return it, and a court allowed them to keep it before that judgment was vacated on appeal.</video:description>
<video:player_loc>https://www.youtube-nocookie.com/embed/EmXJQmZ5d6k</video:player_loc>
<video:duration>116</video:duration>
<video:publication_date>2026-08-30T18:35:36.000Z</video:publication_date>
<video:family_friendly>yes</video:family_friendly>
<video:live>no</video:live>
<video:uploader info="https://thepointoffailure.com/about">The Point of Failure</video:uploader>
</video:video>
<lastmod>2026-08-30T18:35:36.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://thepointoffailure.com/episodes/003-the-song-that-broke-youtube-s-math</loc>
<video:video>
<video:title>Episode 03: The Song That Broke YouTube's Math</video:title>
<video:thumbnail_loc>https://i.ytimg.com/vi/nrBuDELYsV8/maxresdefault.jpg</video:thumbnail_loc>
<video:description>The number 2,147,483,647 is the largest positive value a signed 32-bit integer can represent. As Gangnam Style approached it in 2014, YouTube upgraded its counter to 64 bits. The counter did not break; the story is about an assumption that had to be retired before reality reached it.</video:description>
<video:player_loc>https://www.youtube-nocookie.com/embed/nrBuDELYsV8</video:player_loc>
<video:duration>93</video:duration>
<video:publication_date>2026-08-27T12:20:30.000Z</video:publication_date>
<video:family_friendly>yes</video:family_friendly>
<video:live>no</video:live>
<video:uploader info="https://thepointoffailure.com/about">The Point of Failure</video:uploader>
</video:video>
<lastmod>2026-08-27T12:20:30.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://thepointoffailure.com/episodes/002-440-million-in-45-minutes</loc>
<video:video>
<video:title>Episode 02: $440 Million in 45 Minutes</video:title>
<video:thumbnail_loc>https://i.ytimg.com/vi/IwjPzC8HNYU/maxresdefault.jpg</video:thumbnail_loc>
<video:description>Knight Capital's 2012 market-access failure was a chain: old code remained on a production server, a flag was repurposed, one server missed the deployment, and no verification proved the fleet matched. The SEC later found inadequate controls around erroneous orders, deployment, and incident response.</video:description>
<video:player_loc>https://www.youtube-nocookie.com/embed/IwjPzC8HNYU</video:player_loc>
<video:duration>112</video:duration>
<video:publication_date>2026-08-27T00:26:48.000Z</video:publication_date>
<video:family_friendly>yes</video:family_friendly>
<video:live>no</video:live>
<video:uploader info="https://thepointoffailure.com/about">The Point of Failure</video:uploader>
</video:video>
<lastmod>2026-08-27T00:26:48.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://thepointoffailure.com/episodes/001-the-update-that-stopped-the-world</loc>
<video:video>
<video:title>Episode 01: The Update That Stopped the World</video:title>
<video:thumbnail_loc>https://i.ytimg.com/vi/Hmt4yV3huK0/maxresdefault.jpg</video:thumbnail_loc>
<video:description>CrowdStrike's Falcon sensor received a Rapid Response Content update containing problematic data. The resulting exception crashed affected Windows systems, and recovery often required hands-on work at each machine. This episode traces the gap between a validation check passing and a configuration being safe to deploy.</video:description>
<video:player_loc>https://www.youtube-nocookie.com/embed/Hmt4yV3huK0</video:player_loc>
<video:duration>87</video:duration>
<video:publication_date>2026-08-26T22:17:01.000Z</video:publication_date>
<video:family_friendly>yes</video:family_friendly>
<video:live>no</video:live>
<video:uploader info="https://thepointoffailure.com/about">The Point of Failure</video:uploader>
</video:video>
<lastmod>2026-08-26T22:17:01.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
</urlset>
