Your next cloud bill? It’ll sting less if AWS keeps evolving like it has for folks like Colin Percival. He’s been hammering AWS since 2006 — yeah, when dinosaurs roamed the data centers — and here’s the kicker: it never stopped being his job. For everyday devs, sysadmins, that means a platform that’s battle-tested by the nitpickers who spot flaws before outages hit production.
Percival fired up his first AWS account at 10:31 PM on April 10, 2006, chasing S3 for backups. But real people — you, me, the startup grinding late nights — care because this grizzled vet’s complaints birthed features we now take for granted. Security holes patched. FreeBSD on EC2. Instance resets that wipe attacker footholds. It’s not hype; it’s architecture forged in feedback fire.
Why Did One Engineer Stick with AWS for 20 Years?
Look. Percival wasn’t some fanboy. FreeBSD Security Officer at the time, he tore into AWS from day one. Requests signed? Fine. But responses? Wide open to tampering, especially over plain HTTP. He posted on forums long vanished — crickets from Amazon, probably. Yet he stayed.
Fast-forward: EC2 drops. He nags for FreeBSD support, scores an NDA (via snail mail, fax drama included), pushes custom kernels. Jeff Barr’s blog becomes his megaphone. And Xen security? He recommends Tavis Ormandy. Coincidence or not, vulns get credited soon after.
But — here’s my unique angle, absent from his tale — Percival’s saga mirrors the Unix wars of the ’80s. Back then, AT&T’s System V and BSD camps bickered endlessly, birthing portability standards we still use. AWS? It’s the new Unix, absorbing gripes into a sprawling, dominant kernel. Percival’s not just a user; he’s an unwitting kernel hacker, proving why AWS outlasts pretenders like Joyent or Heroku’s cloud pivots.
A single line from his post nails it:
I created my first AWS account at 10:31 PM on April 10th, 2006. I had seen the announcement of Amazon S3 and had been thinking vaguely about the problem of secure backups.
That’s the spark. Vague thoughts turning into Tarsnap, a backup tool that’s still kicking.
Short para: He wanted read-only roots, memory wipes on reboot for safe package builds.
Amazon blinked — years later, EC2 Instance Attestation arrives. Confused at first (“Just mount read-only!”), they got it once he spelled out kernel exploits. For you? Means safer CI/CD pipelines, less “who tampered my builder?” panics.
How AWS Turned Complaints into Architectural Gold?
Eventual Consistency irked him bad. S3’s “A” over “C” in CAP theorem? He pitched “Eventually Known Consistency” — peek internal state for consistency in happy paths. S3 flipped optimizations eventually. Not overnight, but persistently.
Percival’s blog, “Amazon, Web Services, and Sesame Street,” rippled inside Amazon. Widely read, they say. Why? Because he’s not yelling from Twitter; he’s building on it, shipping FreeBSD images via insider APIs months pre-public launch.
And the scrubbed history? E-Commerce Service, AWS’s true first service for affiliates — poof, gone from lore. Percival calls it out. Skepticism alert: AWS PR loves clean origin stories (SQS as “first”), but reality’s messier, stickier.
Devs today deploy Lambdas without blinking, but rewind to 2007: No custom kernels at launch. Percival’s under NDA, faxing signatures (no fax? Snail mail to Seattle). That’s grit mirroring your weekend war room fixes.
What Does AWS’s Long Tail Mean for Your Stack?
Bold prediction: AWS won’t fade because obsessives like Percival — who’ve seen HTTP requests, Xen youth, S3 flips — anchor it. New clouds promise shiny SLAs, but without this feedback loop? They’ll fracture like Oracle Cloud’s early stumbles.
Real impact: Your hybrid setups, multi-cloud dreams? Riskier. Percival never left because AWS bends without breaking. Security evolved from his rants; scalability from his builds. For platform engineers, it’s a reminder: Vendor lock-in isn’t evil if the vendor listens.
He griped about HTTP defaults — TLS norms fixed that. Xen audits? Hired the guy he suggested. Instance resets? Delivered 18 years on. That’s not luck; it’s a system where users like him are co-architects.
One para wonder: AWS endures.
But critique the spin — AWS touts innovation races, yet Percival’s tale shows evolution via dogged users, not just Bezos visions. Corporate hype skips the forums, NDAs, faxes.
🧬 Related Insights
- Read more: Agentforce’s External API Gamble: The Security Fix No One Mentions
- Read more: AI Labelers: The Overworked Humans Ghostwriting Your Bot’s Brain
Frequently Asked Questions
What is Colin Percival’s history with AWS?
He started in 2006 with S3 pursuits, pushed FreeBSD on EC2, flagged security gaps, and shaped features like instance attestation over 20 years.
Why hasn’t AWS signed responses yet?
Percival noted it early; TLS mitigates, but end-to-end signing beats transport security — still missing today.
Can I run FreeBSD on AWS EC2 now?
Yes, thanks to early hacks like Percival’s custom kernel pushes in 2007.