Software Supply Chains [#Log4Shell]
cloud203017 Joulu 2021

Software Supply Chains [#Log4Shell]

Our scheduled topic was supply chains generally, but the Log4Shell vulnerability dominated the discussion. We dove into the challenge of patching and fixing a library that is literally in nearly every device or service for years and years. That led us to supply chains in the context of software, and specifically Java Log4j. This is a critical topic and our conversation about it was very thoughtful. We really covered the angles of what it takes to produce and maintain a supply chain for software. Then we discussed alternatives and things to consider when you building anything: software products or physical products in which embedded systems and components impact your designs. Transcript: https://otter.ai/u/CJ8pYF1La6tetFasqZhEojo_zoY Image: https://www.pexels.com/photo/carton-container-with-eggs-in-rows-6294430/

Tämä jakso on lisätty Podme-palveluun avoimen RSS-syötteen kautta eikä se ole Podmen omaa tuotantoa. Siksi jakso saattaa sisältää mainontaa.

Jaksot(500)

Harness AI Governance

Harness AI Governance

In this episode, we continue our discussion of governed execution for agentic AI and how to prevent agents from taking actions they should not take. We use a maintenance example to examine access, app...

25 Syys 48min

Harnesses Pt 1

Harnesses Pt 1

This week we discuss the role of a harness in AI systems and why it matters for infrastructure, tool use, rules, and operational constraints when an AI acts on behalf of a person or organization. We a...

18 Syys 37min

Whats Up with VMware?

Whats Up with VMware?

In this episode, we are joined by guest Byron Dill from Summit for a great deep dive into virtualization. We talk about virtualization from an enterprise and infrastructure perspective, with a focus o...

11 Syys 58min

Token Cost Optimization

Token Cost Optimization

In this episode, we focus on token cost and token optimization in generative AI, and we discuss why token use needs budgets and controls rather than being treated as unlimited. We also talk about how ...

4 Syys 39min

Vibing vs Buying

Vibing vs Buying

In this episode, we get into current market news, including pending IPOs, hardware investment, and IBM’s AI-related announcement with Red Hat, and what this may mean for open weights models and hybrid...

28 Elo 55min

AI Harnesses and Hosting

AI Harnesses and Hosting

This week we have an exciting conversation about harnesses, neoclouds, open weights models, and the current AI infrastructure landscape. We discuss bare metal automation, agent-friendly APIs, CPU comp...

14 Elo 57min

Innovations in Agentic Pipelines

Innovations in Agentic Pipelines

In this episode, we discuss Red Hat’s enterprise AI work, including OpenShift AI, safety guardrails, and router-based model selection. We also talk about smaller AI systems, long-term memory, and the ...

14 Elo 52min

Mirantis IREN Acquisition

Mirantis IREN Acquisition

We discuss the acquisition of Mirantis by the neocloud company IREN, and use it to examine the current market for infrastructure and AI deployment. We look at Mirantis’ consulting business, Kubernetes...

7 Elo 1h 4min