CyberSecurity Awareness Month with Troy Vinson - Episode 161

CyberSecurity Awareness Month with Troy Vinson - Episode 161

This week, Jeffrey is joined by Troy Vinson; a Principal Software Architect at Clear Measure as a CISSP (Certified Information System Security Professional.) He is an experienced leader, architect, and problem-solver in Information Systems Security and Software Development technologies and has spent the majority of his career integrating computer science, information science, and cognitive science to assist in software development and the management of information.

With October being CyberSecurity Awareness Month, Troy gives a rundown on everything that developers and development teams need to know regarding security, how to become more cyber security aware, the top ten web application security risks you need to look out for, how to keep your environment secure regardless or where you're working from, and what you can putting in place today to improve your cyber security.

Topics of Discussion:

[:39] About The Azure DevOps Podcast, Clear Measure; the new video podcast Architect Tips; and Jeffrey's offer to speak at virtual user groups.

[1:11] About today's episode with Troy Vinson!

[1:23] Jeffrey welcomes Troy to the podcast.

[1:30] What is CISSP?

[2:53] Troy shares his career highlights and the path that led him to his current role in cyber security.

[4:39] Why is October Cybersecurity Awareness Month?

[6:18] What developers should be aware of when setting up a connected environment for themselves at home.

[8:47] Troy's favorite VPN services.

[10:08] Best practice: Always work from a VPN, especially as a developer working from a public place.

[10:25] What developers should keep in mind about source code when it comes to cyber security.

[12:32] How to keep documents (that don't quite fit in a source control repository) secure.

[14:31] Troy highlights important security architecture models of practice.

[15:56] How is the STRIDE model applicable?

[17:59] A word from The Azure DevOps Podcast's sponsor: Clear Measure.

[18:30] What is repudiation in the STRIDE model referring to? What is it in code changes? When is it necessary?

[20:22] Are there test suites that developers can use to augment their functional tests that check for security measures?

[23:16] Should development teams hire third parties to do audits versus doing it in-house?

[24:36] What OWASP Top Ten is and why all of your engineers should be trained on it.

[26:15] Is there a comprehensive list of web application security risks?

[27:28] Troy highlights the importance of #6 on the OWASP Top Ten list: vulnerable and outdated components.

[29:15] Rules of thumb regarding security for development teams when it comes to deployment and configuring environments

[30:56] Free online courses for cyber security awareness that you can share with family members and friends.

[33:52] Jeffrey thanks Troy Vinson for joining the podcast!

Mentioned in this Episode:

Architect Tips — New video podcast!

Azure DevOps

Clear Measure (Sponsor)

.NET DevOps for Azure: A Developer's Guide to DevOps Architecture the Right Way, by Jeffrey Palermo — Available on Amazon!

bit.ly/dotnetdevopsebook — Click here to download the .NET DevOps for Azure ebook!

Jeffrey Palermo's YouTube

Jeffrey Palermo's Twitter Follow to stay informed about future events!

DEVintersection Conference — Dec. 7th‒9th in Las Vegas, Nevada

Cybersecurity Awareness Month | CISA

Cybersecurity Awareness Month | National Cybersecurity Alliance (NCSA)

NordVPN

ExpressVPN

STRIDE Model

GitHub

DevSecOps

SharePoint

One Drive

Azure Front Door

Azure Application Gateway

FxCop

Roslyn

Sonarqube

OWASP Top Ten

Top 25 Most Dangerous Software Errors CWE/SANS

2021 CWE Top 25 Most Dangerous Software Weaknesses

Want to Learn More?

Visit AzureDevOps.Show for show notes and additional episodes.

Avsnitt(385)

Jerry Nixon: .NET Aspire and Databases - Episode 345

Jerry Nixon: .NET Aspire and Databases - Episode 345

Jerry Nixon is a Principal Program Manager on the SQL Server team focused on the Data API builder. He's also a fanatic for #CSharp, #StarTrek, and Etymology. He also serves as a professor at Colorado Christian University. Topics of Discussion: [3:34] Why Jerry describes his life as a pearl necklace. [5:15] Jerry recommends the book Never Eat Alone and the importance of community. [6:01] How engineers and parenting are aligned. [7:02] Jerry reflects on Microsoft's history of evangelism, the rise of "opinionated" frameworks, and how .NET Aspire revives a form of proven prescriptive guidance. [9:35] Prescriptive guidance. [12:03] The inevitable evolution of .NET Aspire and how it simplifies container-based development by handling orchestration behind the scenes. [16:56] Paying more attention and awareness to the developer community. [18:30] How GraphQL fits into the Data API Builder experience, giving developers flexibility without needing to write complex backends. [21:40] Jerry talks about community feedback on Data API Builder and how real-world use cases help prioritize features and fix gaps in tooling. [31:02] Jerry's perspective on building container-based solutions. [32:15] Data API Builder's community involvement and upcoming features. [36:15] Docker Desktop. [38:58] The architectural concept of Data API Builder. [44:42] C# coding conventions at Microsoft and the friendly battles over things like naming, underscores, and formatting styles across internal teams. Mentioned in this Episode: Clear Measure Way Architect Forum Software Engineer Forum Programming with Palermo — New Video Podcast! Email us at programming@palermo.net. Clear Measure, Inc. (Sponsor) .NET DevOps for Azure: A Developer's Guide to DevOps Architecture the Right Way, by Jeffrey Palermo .Net Aspire and Data API builder with the Community Jerry on LinkedIn Jerry Nixon Github Colorado Christian University Data API builder for Azure Databases samples Common C# code conventions What is Data API Builder? Quickstart: Use Data API builder with SQL Want to Learn More? Visit AzureDevOps.Show for show notes and additional episodes.

14 Apr 202550min

Stephen Toub: AI in .NET  - Episode 344

Stephen Toub: AI in .NET - Episode 344

Stephen Toub is a Partner Software Engineer at Microsoft. Stephen has been at Microsoft for almost 24 years and has done it all. If it has to do with .NET, he's been in it. And today, he looks after all the .NET libraries making sure .NET continues to be the fastest platform on the planet. He ran the MSDN Magazine before it morphed into the docs and blogs of today. He was a leader in the concurrency and async and parallel programming developments, and now he's turned his attention to pushing the AI envelope with .NET. Topics of Discussion: [4:37] Stephen morphed a few of his many interests into the role he has today. [6:04] How moments like the push for parallel computing, the open-sourcing of .NET, cross-platform support, and performance goals shaped Steven's current focus. [7:37] Steven highlights the two major AI tracks: (1) AI-augmented tools that improve developer productivity, and (2) building AI capabilities into applications themselves. [10:37] The future of user interfaces. [12:43] Why "agents" are basically advanced actor-based systems empowered by large language models and tool calling, enabling reasoning and orchestration beyond simple Q&A. [23:22] Model context protocol. [24:08] A paradigm shift in system integration. [30:24] How Stephen and the .NET libraries team factor out common AI abstractions for the ecosystem, so that different frameworks (Semantic Kernel, Onnx Runtime, Olama, etc.) can interoperate. [32:15] Steven gives examples of how minimal C# code, combined with locally hosted LLMs or cloud endpoints, can solve real tasks. Mentioned in this Episode: Clear Measure Way Architect Forum Software Engineer Forum Programming with Palermo — New Video Podcast! Email us at programming@palermo.net. Clear Measure, Inc. (Sponsor) .NET DevOps for Azure: A Developer's Guide to DevOps Architecture the Right Way, by Jeffrey Palermo Stephen on GitHub Stephen on LinkedIn Demystifying Retrieval Augmented Generation with .NET Suno csharp-sdk Want to Learn More? Visit AzureDevOps.Show for show notes and additional episodes.

7 Apr 202537min

Bruno Capuano: AI Developer Training in .NET - Episode 343

Bruno Capuano: AI Developer Training in .NET - Episode 343

Bruno Capuano is a Principal Cloud Advocate at Microsoft where he empowers teams to build AI solutions with Azure using programming languages like C#, Python, and C++. His approach is to solve complex problems with minimal effort, delivering simple and efficient solutions in today's fast-paced AI landscape. Bruno has led innovation in teams at Avanade across Canada and Europe, transforming cutting-edge technologies into practical business solutions. He is passionate about working with teams, helping them grow, achieve high productivity, and foster collaborative, positive environments. As an international speaker, he advocates for making AI accessible to everyone, empowering teams and organizations to harness its transformative potential. Outside of tech, he is a runner, a lifelong learner, and always looking for his next challenge—whether it's mastering new skills or tackling a marathon. Topics of Discussion: [5:08] Bruno explains how his passion for learning and community engagement led him to a role where he could dedicate himself to education and advocacy. [7:17] Why data scientists and new AI tools often favor Python first, and how Bruno and his team work to ensure .NET developers also have immediate access to modern AI capabilities. [10:31] The progression of getting developers into AI. [11:20] Starting with familiar tools like Notepad. [13:39] The "must have's" for developers who want to start writing AI code. [17:20] The benefit of GitHub models. [23:47] Vector Databases & Retrieval-Augmented Generation (RAG). [25:17] How vector databases store information using numerical representations and enable semantic search. [31:25] Bruno highlights how AI "skills" or "functions" can call external APIs to fetch real-time data. Mentioned in this Episode: Clear Measure Way Architect Forum Software Engineer Forum Programming with Palermo — New Video Podcast! Email us at programming@palermo.net. Clear Measure, Inc. (Sponsor) .NET DevOps for Azure: A Developer's Guide to DevOps Architecture the Right Way, by Jeffrey Palermo Bruno LinkedIn Generative AI for Beginners Want to Learn More? Visit AzureDevOps.Show for show notes and additional episodes.

31 Mars 202538min

Per Kops: Architecture of Ollama and Local LLMs - Episode 342

Per Kops: Architecture of Ollama and Local LLMs - Episode 342

Per is an experienced software architect and developer with more than 19 years of experience in designing, developing, and testing software. He is currently serving as a Distinguished software developer at Delegate, a Microsoft Partner in Denmark. Topics of Discussion: [3:02] More about Per's background in nearly two decades in .NET and Azure consulting. [6:11] The concept of a boutique consultant. [7:00] Founding ATC-Net to share common .NET libraries and avoid duplicative coding. [10:02] Building trust with customers by open-sourcing "generic" components. [11:50] Creating a connector to run Olama (local LLMs) with Semantic Kernel. [20:08] Why Per "fell in love" with Semantic Kernel's abstraction layers and extension possibilities. [21:44] The role of vector stores (like Azure Cognitive Search) in retrieval-augmented generation. [24:33] What do we mean by "vector" in the AI space? [26:39] What is a "text chunker"? [31:43] Azure AI search. [34:07] Finding the right tool for the right task. Mentioned in this Episode: Clear Measure Way Architect Forum Software Engineer Forum Programming with Palermo — New Video Podcast! Email us at programming@palermo.net. Clear Measure, Inc. (Sponsor) .NET DevOps for Azure: A Developer's Guide to DevOps Architecture the Right Way, by Jeffrey Palermo atc-net GitHub Per Kops LinkedIn Per Kops GitHub Want to Learn More? Visit AzureDevOps.Show for show notes and additional episodes.

24 Mars 202535min

Patrick Escarcega: Software Engineering Principles - Episode 341

Patrick Escarcega: Software Engineering Principles - Episode 341

Patrick Escarcega is the Chief Technology Officer (CTO) at Meserow Design, a company known for its excellence in developing and maintaining custom software solutions. His background is in software engineering and has been leading software teams for many years. His technical focus has been on Microsoft development and cloud technologies. Topics of Discussion: [3:30] Patrick recalls the moment he transitioned from individual software developer to leading teams, highlighting the importance of understanding how software adds business value beyond just code. [5:00] Patrick describes the joy he rediscovered in coding when starting his own company, emphasizing the delicate balance between hands-on coding and leadership responsibilities. [7:50] The head chef and food scientist analogy. [9:26] The importance of creating a safe environment, a "pit of success," so developers can naturally follow best practices without feeling constrained. [10:36] Why readable, maintainable code is crucial, especially for senior leaders whose time is spent reading code more than writing it. [13:27] Comparing software engineering creativity to building an engine from "invisible Lego bricks," emphasizes the hidden creativity involved in engineering solutions. [15:08] The importance of leaders giving developers space and freedom to craft innovative solutions, rather than overly prescribing methodologies. [17:00] Running integration tests. [20:41] Accessibility and WCAG compliance explained: Why accessibility should be an integral part of software development and testing workflows. [23:14] EqualWeb accessibility checker and Chrome browser extension. [25:02] Practical everyday use of AI in software development, especially GitHub Copilot, and why developers should embrace AI tools regularly to remain productive and competitive. [31:10] Patrick encourages developers to embrace AI and keep learning, emphasizing that continuous adaptation will keep careers vibrant over the next decade. Mentioned in this Episode: Clear Measure Way Architect Forum Software Engineer Forum Programming with Palermo — New Video Podcast! Email us at programming@palermo.net. Clear Measure, Inc. (Sponsor) .NET DevOps for Azure: A Developer's Guide to DevOps Architecture the Right Way, by Jeffrey Palermo Patrick Escarcega Meserow Design Engineering Practices for LLM Application Development Want to Learn More? Visit AzureDevOps.Show for show notes and additional episodes.

17 Mars 202532min

Daniel Roth: .NET 10 Preview 1 - Episode 340

Daniel Roth: .NET 10 Preview 1 - Episode 340

Daniel Roth is a Principal Product Manager on the ASP.NET team working on ASP.NET Core, Blazor, and other web features. He has previously worked on various parts of .NET, including System.Net, WCF, XAML, and ASP.NET. His passions include building frameworks for modern Web frameworks that are simple and easy to use. Topics of Discussion: [3:15] Daniel shares his journey from back-end services to front-end development and his role in making .NET open-source and cross-platform. [6:10] Blazor and its impact on development. [8:32] A few of the strengths we get with .NET. [9:24] .NET 9 and performance improvements. [12:45] .NET 10 Preview 1 and new features. [17:32] Architectural guidance for Blazor applications. [30:17] The importance of handling state persistence to avoid memory bloat and security issues. [32:32] Observability and telemetry in Blazor. [36:28] Is the nature of the UI web user interface changing as we integrate AI technology and large language models and agents? [37:12] Integration of AI and Generative AI in Blazor. [37:38] The new Microsoft Extensions AI library for interfacing with chat services in .NET applications. Mentioned in this Episode: Clear Measure Way Architect Forum Software Engineer Forum Programming with Palermo — New Video Podcast! Email us at programming@palermo.net. Clear Measure, Inc. (Sponsor) .NET DevOps for Azure: A Developer's Guide to DevOps Architecture the Right Way, by Jeffrey Palermo Ep 274 with Daniel Roth Daniel Roth LinkedIn What's New for ASP.NET Core Blazor in .NET9 Daniel Roth — Author in .NET Blog Performance Improvements in .NET9 .NET Preview 1 is now available! ASP.NET Core in .NET 10 Preview 1 — Release Notes ASP.NET Core Roadmap for .NET 10 #59443 Want to Learn More? Visit AzureDevOps.Show for show notes and additional episodes.

10 Mars 202540min

Dustin Campbell: C# 13 - Episode 339

Dustin Campbell: C# 13 - Episode 339

Dustin is a Principal Software Engineer at Microsoft. He works on enhancing .NET tooling and contributing to the design of the next version of C# as part of the language design team. Prior to his current role, he spent several years working as a program manager on Project Roslyn. He also contributed in a strong way to the Razor UI framework. He recently presented a session at .NET Conf 2024 on What's new in C# 13. Topics of Discussion: [4:04] Fun fact: Dustin has a jazz guitar performance degree! [3:39] The unique appeal of C#. [5:06] Evolution of C# and its features. [10:48] Impact of Async and Await on C#. [13:17] The compatibility of C# 13 with older .NET versions, specifically .NET 8. [15:04] How developers can leverage the latest C# features while still targeting older .NET frameworks, and the challenges associated with runtime support for new language capabilities. [17:04] Hacking the C# compiler. [17:28] The evolution of records from their initial introduction to the added features. [18:46] Records vs. Classes in C#. [22:51] AI's influence on developer productivity. [25:46] The future of AI developer tools. [33:26] The need for better support for testing with large language models and other AI-driven dependencies. Mentioned in this Episode: Clear Measure Way Architect Forum Software Engineer Forum Programming with Palermo — New Video Podcast! Email us at programming@palermo.net. Clear Measure, Inc. (Sponsor) .NET DevOps for Azure: A Developer's Guide to DevOps Architecture the Right Way, by Jeffrey Palermo The Five Pillars: Leadership For Effective Custom Software, by Jeffrey Palermo Jeffrey Palermo's Twitter — Follow to stay informed about future events! Dustin Campbell on LinkedIn .NET Conf 2024: What's New in C#13 Want to Learn More? Visit AzureDevOps.Show for show notes and additional episodes.

3 Mars 202538min

Scott Nichols: Azure AI Foundry - Episode 338

Scott Nichols: Azure AI Foundry - Episode 338

Scott Nichols is a Principal Cloud Solutions Architect at Microsoft. He works for the commercial enterprise division serving the high-tech division out of Silicon Valley. He is also the leader of the .NET and the Azure user groups in Boise, Idaho. He started his career in the IT profession in 1993 as a mainframe and web developer. Since then, he has served as a Lead Software Engineer/Solution Architect, a Software Development Engineering Manager, a Sr. Cloud Software Solution Architect, and a Sr. Enterprise Solution Architect. When not at the keyboard, he loves the outdoors hunting, camping, fishing, archery, and working in the yard. Topics of Discussion: [4:03] Generative AI's turning point. [5:52] Bridging the AI coding gap. [6:39] Scott explains the shift in project workloads to generative AI-based projects, both customer-facing and internal. [7:25] Networking companies using AI to analyze telemetry data and create new products. [8:49] Azure AI Foundry is a web portal that allows developers to spin up Azure Compute and access over 1800 models. [13:00] Although a "Cloud Guy," Scott values his on-prem hardware as a playground for learning and experimenting with AI tools. [15:04] The benefits of using open source or on-prem tools to start working with AI without incurring cloud costs right away. [15:40] The rapid pace of innovation. [20:41] An example of Khan Academy using AI to create an online tutor, requiring significant prompt engineering to ensure accurate responses. [27:12] AI agents monitoring AI agents. [27:59] AI's limitations and opportunities. [31:56] Testing strategies for AI-Integrated systems. [35:37] The future of AI and how it's a great time to be in AI. [39:35] Great advice for the next generation of developers and software engineers. Mentioned in this Episode: Clear Measure Way Architect Forum Software Engineer Forum Programming with Palermo — New Video Podcast! Email us at programming@palermo.net. Clear Measure, Inc. (Sponsor) .NET DevOps for Azure: A Developer's Guide to DevOps Architecture the Right Way, by Jeffrey Palermo The Five Pillars: Leadership For Effective Custom Software, by Jeffrey Palermo Jeffrey Palermo's Twitter — Follow to stay informed about future events! Ep 116 with Scott Nichols Scott Nichols LinkedIn Scott Nichols Twitter Want to Learn More? Visit AzureDevOps.Show for show notes and additional episodes.

24 Feb 202540min

Populärt inom Politik & nyheter

p3-krim
rss-krimstad
svenska-fall
flashback-forever
rss-viva-fotboll
motiv
rss-sanning-konsekvens
aftonbladet-daily
grans
aftonbladet-krim
rss-vad-fan-hande
krimmagasinet
rss-krimreportrarna
olyckan-inifran
fordomspodden
dagens-eko
rss-frandfors-horna
spar
svd-dagens-story
rss-flodet