Henry Been on Security with DevOps - Episode 012

Henry Been on Security with DevOps - Episode 012

In this episode, Jeffrey is discussing security in DevOps with his guest, Henry Been. Henry is an independent DevOps and Azure architect from the Netherlands. He enjoys working with development teams to create and deliver great software — and for him, this includes the full DevOps cycle; starting with discovering and planning new features and ending only when end users are satisfied. Henry’s interests include the Azure cloud, Agile, DevOps, software architecture and the design and implementation of testable and maintainable software. Next to his work, Henry is one of the Microsoft ALM DevOps Rangers — which is a group of 130 engineers worldwide who share professional guidance and create gap-filling solutions surrounding Azure.

Henry and Jeffrey discuss, in-depth, everything you want to know when it comes to security with DevOps. Henry offers advice on how to implement security into your DevOps practice, makes recommendations on how to be more secure at each stage of the software development application lifecycle, highlights possible vulnerabilities that you might want to watch out for, and offers tools you can utilize to combat this and up your security in your DevOps environment.

Topics of Discussion:

[:40] About today’s episode and featured guest expert.

[1:35] Jeffrey welcomes Henry to the podcast.

[1:41] What Henry has been up to of late.

[2:21] How Henry has found himself in the DevOps space.

[3:08] Henry shares some information about the ALM DevOps Rangers he is a part of.

[4:16] About the half-marathon Henry recently finished!

[5:50] How did the term DevSecOps come about? And what do people need to know about it?

[7:22] Henry offers advice on how to implement security into your DevOps practice.

[8:26] Henry’s recommendations for being more secure at each stage of the software development application lifecycle.

[12:47] The vulnerabilities of copying your database offsite.

[13:44] Is keeping your database offline more secure than having it online?

[14:04] A word from Azure DevOps sponsor: Clear Measure.

[14:29] Henry outlines ways to limit the surface area of personal access to environments.

[16:29] A vulnerability in the FCKeditor WYSIWYG HTML editor and how to avoid it.

[17:53] Henry and Jeffrey’s take on why many are fearful of a scheduled, automated deployment or redeployment.

[20:45] The work Henry has done with Azure Policy and how can help.

[24:04] One of the most vulnerable attack surfaces: any area that a human’s account has access to.

[24:41] What’s on the roadmap for Henry!

[26:32] How to keep up with Henry and everything he’s doing.

[27:02] Henry’s recommendations to those who want to learn more about security in their DevOps environment.

Mentioned in this Episode:

Azure DevOps

Azure DevOps User Group on Meetup

Microsoft ALM DevOps Rangers

DevSecOps

SQL Clone from Redgate

Redgate

Clear Measure (Sponsor)

Infrastructure as code

FCKeditor WYSIWYG HTML

Azure Policy

Henry’s Blog (HenryBeen.nl)

Henry’s Twitter @Henry_Been

Want to Learn More?

Visit AzureDevOps.Show for show notes and additional episodes.

Follow Up with Our Guest:

Henry Been’s LinkedIn

Henry’s Blog

Henry’s Twitter

Episoder(371)

Sam Guckenheimer on Testing, Data Collection, and the State of DevOps Report - Episode 003

Sam Guckenheimer on Testing, Data Collection, and the State of DevOps Report - Episode 003

This episode, Jeffrey Palermo welcomes his guest Sam Guckenheimer, to the podcast! Sam is the Product Owner for the Azure DevOps product line at Microsoft, and has been with the Microsoft team for the last 15 years. He has 30 years of experience as an architect, developer, tester, product Manager, project manager, and general manager in the software industry worldwide. His first book, Software Engineering with Microsoft Visual Studio Team System, was translated into 7 languages and recognized as a de facto guide for teams adopting Agile practices. He’s also a frequent speaker at industry conferences.   Sam explains the exciting new offer around Azure Pipelines for open source teams, changes he has seen in the industry from his many years of working at Microsoft, and some of the biggest changes in how users work with Azure DevOps. He also provides tons of key insights into the findings and research around predicting the impact Microsoft’s changes will make on user interactions, good practices around gathering live site telemetry and data collection, architectural (or design decisions or patterns) that help or hurt the live site supportability of a complex system, and key takeaways from his own internal learnings and the State of DevOps Report.   Topics of Discussion: [:50] About today’s topic and guest. [2:00] What is Sam focusing on now? [3:11] With many years at Microsoft, IBM, and Rational Software, what changes stand out in the industry in Sam’s mind? [5:51] What’s the most exciting part of the Azure DevOps release for Sam? The open source capabilities of course! [9:29] Why Sam loves open source frameworks. [11:05] What makes Azure DevOps so successful? And the biggest changes in how engineers work with it. [15:15] A word from Azure DevOps sponsor: Clear Measure. [15:43] The findings and research around predicting the impact Microsoft’s changes will make on user interactions, their feedback cycle, and applying the “rule of thirds” to make data-informed decisions. [19:42] Good practices around gathering live site telemetry and data collection through Azure Log Analytics and Azure Application Insights. [22:42] Other internal learnings: the notion of a production first mindset, designated responsible individual (DRI), and repair items. [26:56] Has Sam found any architectural or design decisions or patterns that help or hurt the live site supportability of a complex system? [30:42] Sam’s take on APM software and traditional monitoring tools. [32:36] Sam speaks about the State of DevOps Report and why it is so important. [36:39] Key takeaways from Sam on the State of DevOps Report and his own internal learnings.   Mentioned in this Episode: Azure DevOps Software Engineering with Microsoft Visual Studio Team System, by Juan J. Perez and Sam Guckenheimer Azure Pipelines Agile Github Git Node Golang .NET Framework 4 Clear Measure (Sponsor) Azure Log Analytics Azure Application Insights AKA.MS/DevOps Buck Hodges APM Tools The State of DevOps Report   Want to Learn More? Visit AzureDevOps.Show for show notes and additional episodes.   Follow Up with Our Guest: Sam Guckenheimer’s LinkedIn Sam Guckenheimer’s Amazon Book Page

24 Sep 201841min

Donovan Brown on How to Use Azure DevOps Services - Episode 002

Donovan Brown on How to Use Azure DevOps Services - Episode 002

Welcome to the second episode of The Azure DevOps Podcast — with your host, Jeffrey Palermo. Jeffrey is joined by his guest, Donovan Brown, to discuss how to use Azure DevOps services. Donovan is a Principle DevOps Manager at Microsoft, helping developers do great things with DevOps methods on the Microsoft platform. He has been with Microsoft since December of 2013, and has been a developer for 20 years.   This episode, Jeffrey and Donovan talk about the whirlwind it’s been since the launch of the new Azure DevOps, key information new developers might want to know when beginning to use or incorporate Azure DevOps, some of the changes to their services, what’s available for packages in DevOps, the free build capabilities Microsoft is giving to open source projects, some of the new capabilities around GitHub integration, and more!   Topics of Discussion: [:52] About today’s topic and guest. [1:02] Jeffrey welcomes Donovan to the podcast and he speaks about the name change and what it’s been like since the launch. [4:25] Donovan shares his background in developing and his day-to-day duties at Microsoft. [11:47] How the Team Foundation System has morphed through the phases to Azure DevOps. [14:59] The key things new developers need to put into the various pieces (the continuous integration build, the deployment, etc)? What concepts should they think of? [19:27] Donovan explains some of the changes to Azure DevOps services that allow you to pick and choose what you want to use. [21:08] A word from Azure DevOps sponsor: Clear Measure. [21:37] Donovan talks about some of the new capabilities around GitHub integration. [24:00] What is YAML? [27:44] How developers manage YAML. [29:10] Donovan speaks about what’s available for Packages in DevOps. [34:22] About the new open source pipeline listing. [36:20] About the free build capabilities Microsoft is giving to open source projects. [37:00] What Jeffrey and Donovan love about the free availability of Azure DevOps for open source projects. [38:58] Donovan explains the concept of an unbreakable pipeline, its capabilities, and what makes it so exciting. [43:30] Donovan’s suggestion for listeners to go do after listening to this week’s episode.   Mentioned in this Episode: Azure DevOps yo Team VSTS @DonovanBrown on Twitter PowerShell XAML Clear Measure (Sponsor) GitHub YAML NuGet Dynatrace Dynatrace’s Podcast: PurePerformance Docs.Microsoft.com #LoECDA on Twitter (for any questions on Azure DevOps) Channel 9   Want to Learn More? Visit AzureDevOps.Show for show notes and additional episodes   Follow Up with Our Guest: Donovan Brown’s LinkedIn @DonovanBrown on Twitter DonovanBrown.com

10 Sep 201845min

Buck Hodges on the introduction to Azure DevOps Services - Episode 001

Buck Hodges on the introduction to Azure DevOps Services - Episode 001

Welcome to the first edition of The Azure DevOps Podcast! Your host, Jeffrey Palermo is joined by guest, Buck Hodges, to announce the global release of Azure DevOps Services. Buck is the Director of Engineering for the Azure DevOps product group and has been at Microsoft for over 15 years.   Azure DevOps Services (previously known as Visual Studio Team Services) aims to help developers ship faster. With Azure DevOps Services comes a full set of services that you can use separately, with other non-Microsoft services, or together as a suite.   In this episode, Jeffrey and Buck dive into all the key differences that come along with the rebranding and new services. Buck also gives a rundown of the system (from how it’s organized to how to mix and match with other devops tools on the market) and many of the new, exciting features available for developers.   Episode Sponsor: Clear Measure is a software engineering firm and Microsoft Gold Partner empowering development teams to be their best. Clear Measure equips developers with the devops tools, methods, and automation necessary to focus on building their applications rather than wrestling with builds, deployments, or environments. Click clear-measure.com to see whether a devops implementation is right for you.   Topics of Discussion: [:30] About today’s topic and guest. [1:00] Buck Hodges announces the new Azure DevOps Services. [2:44] Buck’s background in DevOps and career progression at Microsoft. [10:00] Key differences with the rebranding to Azure DevOps, and its 5 main services: Pipelines, Boards, Artifacts, Repose, and Test Plans. [14:49] Can Jira (and other similar softwares) users adopt Azure DevOps? [16:48] About Microsoft’s commitment to open source and giving back by offering free use of Azure DevOps to run free builds for open source projects. [20:02] About the ease of getting started with Azure Pipelines through the GitHub Marketplace, and some of the big users with Pipelines. [20:49] A word from Azure DevOps sponsor: Clear Measure. [21:19] About the internal transformation of the Azure DevOps team and what it looks like today. [24:04] How many developers are part of Buck’s organization? [24:54] Buck gives a rundown of the system (how it’s organized, how many team projects, how many Git repositories, how many independent services, etc.) [28:58] Do they build all the services together in the same Git repository or do they split them into different build configurations? [32:45] What’s coming next for Azure DevOps? [36:34] Buck addresses some general misconceptions. [40:00] When will customers be able to get their hands on the new Azure DevOps 2019 server? [41:30] Where to learn more or get started with Azure DevOps.   Mentioned in this Episode: Azure DevOps VSTS Azure Pipelines Azure Boards Azure Artifacts Azure Repose Azure Test Plans Team Foundation Server (TFS) Jira GitHub Visual Studio Code TypeScript Dev.Azure.com   Want to Learn More? Visit AzureDevOps.Show for show notes and additional episodes   Follow Up with Our Guest: Posts by Buck Hodges on Microsoft Azure Buck Hodges’ LinkedIn

7 Sep 201843min

Populært innen Politikk og nyheter

giver-og-gjengen-vg
aftenpodden
forklart
stopp-verden
aftenpodden-usa
popradet
fotballpodden-2
dine-penger-pengeradet
det-store-bildet
nokon-ma-ga
bt-dokumentar-2
frokostshowet-pa-p5
rss-dannet-uten-piano
aftenbla-bla
rss-ness
e24-podden
rss-penger-polser-og-politikk
rss-borsmorgen-okonominyhetene
rss-fredrik-og-zahid-loser-ingenting
rss-garne-damer