Skip to main content

Posts

Showing posts from August, 2021

SLOs: The heart of reliability practices

The most challenging principle of Agile is “simplicity — the art of maximizing the amount of work not done.” Developers waste immense cycles trying to avoid software failure. Rather than defining “good enough” reliability and stopping there, teams go way beyond the point of diminishing returns, building what is jokingly referred to as “gold plated” reliability infrastructure around their software. Fear of failure has instilled an all-or-nothing mindset to software reliability that is the opposite of Agile simplicity. The reason developers overbuild for reliability — and there are many ways you can over-engineer for performance, uptime, high availability, even security — is that they never really had a way to define “good enough” reliability in the first place. Without a clear picture of success or a clear finish line, developers can readily communicate with the organization. The big boss wants 100% reliability, and that leads to eye rolls from engineers. Eureka! SLOs Forever Changed

SD Times news digest: Rookout launches Live Logger, Bridgecrew now has Multi-Cloud Drift Detection, HVR 6.0 now available

Rookout, the modern debugging platform, today announced Live Logger, which will complement the company’s existing Live Debugger for dynamic observability into modern applications.  Live Logger enables developers to switch logs on and off on-demand and to change their verbosity on the fly to significantly reduce logging noise and cost.  “Logs have become a ‘can’t live with them, can’t live without them’ asset for most engineering organizations,” said Ron Teeter, VP of Engineering at Jobvite. “Of course it’s painful to debug an application and find you don’t have the necessary logs; but it’s just as painful when they are missing context or become so noisy that you have to ignore them altogether. Being able to dynamically set where the logs are placed and how verbose they are with Rookout Live Logger is a game-changer.” Bridgecrew now has Multi-Cloud Drift Detection  Bridgecrew announced Multi-Cloud Drift Detection, which identifies and flags discrepancies between how cloud resources

3 common process automation mistakes (and how to fix them)

Like their cloud-native counterparts, many large or longstanding enterprises aspire to automate as much of their operations as possible. As a result, many of them get overly ambitious with their process automation goals, and attempt to roll out sweeping, company-wide digital transformation initiatives. While ambition is a good thing, many of these initiatives take years to complete, and often require ripping and replacing legacy systems.  Few organizations consider that end-to-end process automation takes a change in mindset that spans people, processes and technology. Let’s take a look at three of the most common process automation mistakes, and how organizations can work together to fix them. Rolling Out Strategic Automation Initiatives Too Fast While there’s nothing wrong with being strategic, thinking on too large of a scale is a common pitfall of overly ambitious automation projects. Taking on too much strategic work too early runs a high risk that the organization doesn’t se

SD Times news digest: Anaconda begins funding Pyston project, Google commits $10 billion to advance cybersecurity, Apache weekly update

Anaconda announced that it would begin funding the Pyston project by hiring its lead developers Kevin Modzelewski and Marius Wachtler.   Pyston’s core developers will focus on building an open-source community of users, contributors, and maintainers to ensure the Pyston project’s long-term sustainability, according to the company.  The project is an open-source implementation of the Python language that executes programs on average 20% to 50% faster than standard Python. Additional details are available here .  Google commits $10 billion to advance cybersecurity Google announced that it will commit $10 million over the next five years to strengthen cybersecurity, including expanding zero-trust programs, helping secure the software supply chain, and enhancing open-source security. The company also stated that it is pledging to train 100,000 Americans in fields like IT Support and Data Analytics, learning in-demand skills including data privacy and security through the Google Care

TypeScript 4.4 brings control flow analysis

Microsoft has announced the general availability of TypeScript 4.4.  This latest release introduces control flow analysis for aliased conditions and discriminants, which checks to see if a type guard has been used before a particular piece of code.  Another new feature is index signatures for symbol and template string patterns. Index signatures are used to describe objects that have properties which must use a certain type, but until now they could only be used on string and number keys.  Also, in TypeScript 4.4, the “unknown” type will be the default for catching variables. According to Microsoft, in JavaScript any type of value can be thrown and then caught in a catch clause, and in the past, TypeScript typed catch clause variables as “any,” but once it added the “unknown” type, it realized it was a better choice than “any” for catch clauses. This release introduces a new flag called –useUnknownInCatchVariables that changes the default type to “unknown” from “any.” Another new f

SD Times news digest: Apple resolves class-action suit from US developers regarding App Store, Qt Creator 5.0 released, Phoenix Framework 1.6.0 first release candidate

Apple announced new changes to the App Store that will resolve a class-action lawsuit from US developers. The agreement clarifies that developers can share purchase options with users outside of their iOS app; expands the price points developers can offer for subscriptions, in-app purchases, and paid apps; and establishes a new fund to assist qualifying US developers. Apple and the developers agreed to maintain the program in its current structure for at least the next three years. Businesses earning less than $1 million annually will continue to benefit from the reduced commission, while larger developers pay the App Store’s standard commission on app purchases and in-app payments. Additional details are available here .  Qt Creator 5.0 released Qt Creator 5.0 comes with experimental support for Clangd as the backend for the C/C++ code model.  This feature is optional and turned off by default, replacing the libclang based code model, and builds on support for the Language Serv

SD Times Open-Source Project of the Week: Kubescape

Kubescape is a tool for testing if Kubernetes is deployed securely. It uses the Kubernetes Hardening Guidance released by the NSA and CISA to do this.  Tests are configured in YAWL files, which makes it easy to update when specifications for tests change.  It runs tests on the following things: non-root containers, immutable container filesystem, privileged containers, hostPID and hostIPC privileges, hostNetwork access, allowedHostPaths field, protecting pod service account tokens, resource policies, control plane hardening, exposed dashboard, allow privilege escalation, applications credentials in configuration files, cluster-admin binding, exec into container, and Linux hardening. It is based on Open Policy Agent ’s engine and ARMO ’s posture controls. According to the project’s maintainers, it works by retrieving Kubernetes objects from an API server and running regos snippets from ARMO against them.  The results of the tests get printed in a “console friendly” manner by def

10 Different Types of Servers in Networking Neeraj Mishra The Crazy Programmer

The servers are the devices that work as the data processing systems in the public and the private sector. Whether you want to work in an IT company or any other firm related to digital technologies, you must have sound knowledge about servers. In this article, I will be discussing servers and their types. So, if you are also seeking the same information, keep reading this post until the end. What is Network Server? Servers are the devices used to store and process data of companies, people, and other users. The servers can exist in hardware or virtual form and keep extracting data and storing extracted data in its storage unit. It can be explained as the computer devices that share and keep the data, resources, services, and any program to the other computer. These devices can be of any type; all they need to store the data and share the same when they get the required command. The servers can be small in size and can also grow as an extensive database. Nowadays, there are plenty of

Leading Open Policy Agent through graduation at CNCF

There are over 42 million public repositories on GitHub, but only a handful of projects reach the point of widespread use and adoption. One such project is Open Policy Agent (OPA), which is used to write policy as code.  OPA graduated from the CNCF earlier this year, and is one of 16 projects to reach that status. On a recent episode of the SD Times “What the Dev” podcast, Torin Sandall, VP of open source at Styra, the company that originally created OPA, discussed the process of donating the project to the CNCF and leading it through to graduation.  According to Sandall, the project was created in 2016 and, like many open-source projects, took a while to gain traction and visibility. During that first year there was a heavy focus on R&D and building integrations with other projects.  “And so over that first year and a half or so, people kind of started coming along organically and they started to kick the tires because they saw that this project was solving kind of like real

No-code cloud orchestration redefines application development

Technology advances, over the past decade, have emboldened us to take on projects and processes that would normally seem way beyond the scope of our skill sets. We are now equipped with digitized tools that enable us to fulfill many of our DIY desires. The drive to possess autonomy, self-sufficiency, greater productivity and customization in our home and work life has led to digital transformations that are shaping our corporate environments.  Neutralizing cloud orchestration language barriers Cloud application deployments have required specialized language or programming code, utilized by trained software developers. In the same manner that a trained architect or engineer drafts and interprets the blueprints for a building project, app developers use a special language to develop useful and complex applications. Cloud orchestration is now enabling the democratization of technology by empowering non-technical business users with the ability to become the architects of their own custo

SD Times news digest: Automation Anywhere’s RPA maturity assessment, Wipro and DataRobot partnership, and SambaNova and ORock partnership

Automation Anywhere has announced the release of a RPA Maturity Assessment tool that points out areas where companies could be scaling automation more quickly and effectively.  The tool assesses program maturity in four areas: vision and strategy, process and measurement, organization and people, and architecture and technology.  The company also announced expanded training offerings and other resources for improving intelligent automation. Wipro and DataRobot announce partnership  The new partnership will provide augmented intelligence capabilities to help customers make their businesses more AI-driven. According to Wipro, this collaboration will help ensure faster “data to value.”  “Wipro is committed to helping clients in their journey to become intelligent enterprises and implement AI at scale,” said Harish Dwarkanhalli, president of applications and data for iDEAS at Wipro Limited. “Our approach is to simplify AI deployment in enterprises using a democratized methodology and

Report: Majority of development teams not CI/CD experts

Current DevOps tools and processes aren’t cutting it for many organizations. Despite the industry having now supposedly largely moved to a continuous integration and continuous delivery (CI/CD) approach, it appears that the majority of development teams aren’t actually practicing true CI/CD at an expert level.  According to CloudBolt ’s latest report, “ The Truth About DevOps in the Hybrid Cloud Journey ,” only four percent of respondents consider themselves to be experts in CI/CD. The majority of respondents (76%) consider their CI/CD maturity level as “intermediate.” “CI/CD has evolved to the point where it is now widely accepted as the optimal approach for modern application development and deployment. Even though the concepts behind CI/CD have been around for decades, most organizations are still early on their journey,” CloudBolt wrote in the report.  RELATED CONTENT:  The State of CI/CD The challenges and benefits of continuous delivery Further, one promise of CI/CD is tha

SD Times news digest: Grafana raises $220 million in funding, Kotlin 1.5.30 released, FusionAuth announces advanced threat detection

Grafana Labs announced $220 million in Series C that it said it will use to focus on accelerating the development of its open-source observability platform.  The company also recently added k6, the company behind the open-source load-testing tool, and Pace.dev, a team known for creating tools with great developer experience, to the Grafana Labs family.  Additional details are available here .  Kotlin 1.5.30 released Kotlin 1.5.30 includes many experimental languages and standard library features that are planned for Kotlin 1.6.0. The experimental features include sealed ‘when’ statements, changes to opt-in requirements, instantiation of annotation classes, improvements to the ‘Duration’ and ‘Regex’ stdlib APIs, and more. Kotlin 1.5.30 also includes native support for Apple Silicon and the promotion of the Kotlin/JS IR backend to Beta. FusionAuth announces advanced threat detection FusionAuth announced FusionAuth Advanced Threat Detection which provides additional security for

SD Times news digest: Android improving how ratings work in Play Store, Kong Konnect available on Red Hat OpenShift, IBM unveils processor for deep learning inference

Android started a multi-quarter program of improvements to make ratings more personalized and indicative of the experience each individual user can expect, and to make them easier to navigate and use for developers. In November 2021, users on phones will start to see ratings specific to their registered country.  Also, early in 2022, users on other form-factors such as tablets, Chromebooks, and wearables will start to see ratings specific to the device that they’re on. Additional details are available here .  Kong Konnect available on Red Hat OpenShift Kong Konnect is now available on Red Hat OpenShift to bolster API and service connectivity across Kubernetes and hybrid architectures.  “Kong Konnect is now a certified Red Hat OpenShift Operator,” said Julio Tapia, senior director, Partner Ecosystem, Core Cloud Platforms, Red Hat. “Kong has worked closely with Red Hat to streamline and automate deployments of Kong’s leading API management solution on Red Hat OpenShift so enterpri

Gartner identifies emerging technologies to look into in 2021

Engineering trust, accelerating growth, and sculpting change are three main reasons companies are looking to explore emerging technologies, such as NFTs, sovereign cloud, data fabrics, generative AI, and composable networks, according to Gartner’s Hype Cycle for Emerging Technologies 2021.  “Technology innovation is a key enabler of competitive differentiation and is the catalyst for transforming many industries. Breakthrough technologies are continually appearing, challenging even the most innovative organizations to keep up,” said Brian Burke, research vice president at Gartner. “Leading organizations will lean on the emerging technologies in this year’s Hype Cycle to build trust and new growth opportunities against a background of continued strategic change and economic uncertainty.” According to Gartner, trust demands security and reliability, but it can also be a foundation for delivering business value if that foundation consists of engineered, repeatable, trusted, proven and s

SD Times news digest: F5 announces new commitments to open source, Julia Computing receives DARPA grant, Apache weekly update

To enable developers and DevOps professionals to accelerate the delivery of their applications, F5 will release new open-source versions of management solutions, along with a new open-source modern application reference architecture. The company also stated that it will take an active role in the Kubernetes Ingress project and that it will join the Gateway API community. The new Now Arriving is an interactive community experience featuring seven different immersive digital environments designed by artists and developers to help viewers learn about the capabilities of the F5 open-source platform.  Julia Computing receives DARPA grant for AI-based digital phased arrays using GPUs  Julia Computing has been awarded funding by DARPA to bring the company’s advanced AI and ML capabilities to the field of fully digital phased array systems. “With the increasing availability of low-cost radio integrated circuits (ICs) with excellent performance characteristics, the further applicability of

7 Effective Tips on Hiring Remote Software Developers Neeraj Mishra The Crazy Programmer

Getting more for less – these four words describe the main reason why companies opt for hiring remote developers. But since you’re here, you don’t need convincing – you’ve already made up your mind. Now, it’s time for the tricky part: choosing the right people to get the work done. And it is tricky, so don’t let anyone convince you otherwise. First of all, in-person meetings are off the table. You’ll have to rely on video conferencing – both for the screening process and day-to-day management later on. Plus, there’s a bunch of other widespread concerns: cultural differences, legal protection, etc. So, how do you hire dedicated development team you won’t regret working with down the road? Here are seven time-tested tips to help you make the right decision. Know What You Need in Perfect Detail In the absolute majority of cases, not knowing (or misunderstanding) what you need at the recruitment stage is what causes the later-on dissatisfaction with the dedicated development team.

DataOps engineers run toward error and automate it away

The DataOps role is unique in the space of data analytics, with its goal to enable data engineers, scientists, analysts and governance to own the pipelines that run the assembly process. Essentially, DataOps engineers work on, but not in, these pipelines, according to a DataKitchen webinar titled “ A Day in the Life of a DataOps Engineer. “ “We want to run our value pipeline, like Toyota makes changes. We also want to be able to change that pipeline, take a piece of it, change it, and be able to iterate quickly and change our pipelines as fast Silicon Valley companies do on their websites,” said Christopher Bergh, the CEO and “head chef” at DataKitchen. The space of DataOps combines Agile development, DevOps, and statistical process controls and applies them to data analytics.  However, the current challenges in organizations stem from the fact that people don’t all have the mindset that their job is to deliver value to the end user, since they’re so focused on their immediate tas

SD Times news digest: Twilio launches developer toolkit, New Jupyter Notebooks improvements in Azure DevOps, JetBrains releases EduTools Plugin 2021.8

Twilio launched its Developer Toolkit which enables companies to use the building blocks that are needed to connect and route trusted, secure, first-party data wherever their teams need it.  It provides developers with streamlined data collection so that they can save time setting up analytics infrastructure and improve the performance of their apps and websites by using the most performant data sources.  New additions to the toolkit include Analytics.js 2.0, batching for Analytics.js 2.0, Swift and Kotlin libraries, destination actions, and multi-instance destinations.  Additional details on the new toolkit are available here .  New Jupyter Notebooks improvements in Azure DevOps Microsoft announced an enhanced Jupyter experience with Azure DevOps, which allows users to render their .ipynb notebook files directly in Azure DevOps now with an improved viewing experience. The Jupyter team also added new features to enhance Jupyter Notebook support including Notebook Exports and Fun

SD Times Open-Source Project of the Week: Uno Platform

The Uno Platform is an open-source UI platform released under the Apache 2.0 license for single-codebase applications for Windows, WebAssembly, iOS, macOS, Android, and Linux. Developers can maintain pixel-perfect control over where pixels go while having a choice of developing a platform-specific or custom look and feel of your application. For example, a button will use the original UWP/WinUI style to draw the same look-and-feel button on desktop, mobile and on a web platform. Uno Platform uses XAML styling to easily target native controls if desired, on each individual control on screen. The newest release of the platform is version 3.9, which brings support for .NET 6 (for iOS, Android, mac Catalyst and macOS), support for Visual Studio 2022 templates, WinAppSDK 0.8.1, Focus management updates, and a XAML Trimming feature to reduce the size of WebAssembly apps. The move to .NET 6 means that the simpler SDK-style projects are used for most targets except for UWP. This allowed th

Desktop First UX Summit 2021 – Learn UI & UX from Industry Experts for Free Neeraj Mishra The Crazy Programmer

I remember the day Apple’s Steve Jobs announced the iPhone. Steve was a genius of presentation. He was P. T. Barnum incarnate, reimagined for the digital age. He said “ I am announcing three products today; a widescreen iPod, a revolutionary phone and a break-through internet device… and we are calling it the iPhone ”. It was a superbly ‘Steve’ performance, dripping with the braggadocious drama he was so good at and peppered with pregnant pauses to give the audience time to applaud and to let the import of what he was saying sink in. That event, accompanied by a soundtrack of excited whoops, was a genuine inflection point for the tech industry; a truly capable hand-held computer was being launched. The fact it was a phone seemed almost secondary. Had it been anyone else other than Steve Jobs would it have been the success it became? We will never know, but it’s hard to imagine the same stratospheric launch taking place to the more monotone vocalizations of the financially successful bu