CyberSecurity Awareness Month with Troy Vinson - Episode 161

CyberSecurity Awareness Month with Troy Vinson - Episode 161

This week, Jeffrey is joined by Troy Vinson; a Principal Software Architect at Clear Measure as a CISSP (Certified Information System Security Professional.) He is an experienced leader, architect, and problem-solver in Information Systems Security and Software Development technologies and has spent the majority of his career integrating computer science, information science, and cognitive science to assist in software development and the management of information.

With October being CyberSecurity Awareness Month, Troy gives a rundown on everything that developers and development teams need to know regarding security, how to become more cyber security aware, the top ten web application security risks you need to look out for, how to keep your environment secure regardless or where you're working from, and what you can putting in place today to improve your cyber security.

Topics of Discussion:

[:39] About The Azure DevOps Podcast, Clear Measure; the new video podcast Architect Tips; and Jeffrey's offer to speak at virtual user groups.

[1:11] About today's episode with Troy Vinson!

[1:23] Jeffrey welcomes Troy to the podcast.

[1:30] What is CISSP?

[2:53] Troy shares his career highlights and the path that led him to his current role in cyber security.

[4:39] Why is October Cybersecurity Awareness Month?

[6:18] What developers should be aware of when setting up a connected environment for themselves at home.

[8:47] Troy's favorite VPN services.

[10:08] Best practice: Always work from a VPN, especially as a developer working from a public place.

[10:25] What developers should keep in mind about source code when it comes to cyber security.

[12:32] How to keep documents (that don't quite fit in a source control repository) secure.

[14:31] Troy highlights important security architecture models of practice.

[15:56] How is the STRIDE model applicable?

[17:59] A word from The Azure DevOps Podcast's sponsor: Clear Measure.

[18:30] What is repudiation in the STRIDE model referring to? What is it in code changes? When is it necessary?

[20:22] Are there test suites that developers can use to augment their functional tests that check for security measures?

[23:16] Should development teams hire third parties to do audits versus doing it in-house?

[24:36] What OWASP Top Ten is and why all of your engineers should be trained on it.

[26:15] Is there a comprehensive list of web application security risks?

[27:28] Troy highlights the importance of #6 on the OWASP Top Ten list: vulnerable and outdated components.

[29:15] Rules of thumb regarding security for development teams when it comes to deployment and configuring environments

[30:56] Free online courses for cyber security awareness that you can share with family members and friends.

[33:52] Jeffrey thanks Troy Vinson for joining the podcast!

Mentioned in this Episode:

Architect Tips — New video podcast!

Azure DevOps

Clear Measure (Sponsor)

.NET DevOps for Azure: A Developer's Guide to DevOps Architecture the Right Way, by Jeffrey Palermo — Available on Amazon!

bit.ly/dotnetdevopsebook — Click here to download the .NET DevOps for Azure ebook!

Jeffrey Palermo's YouTube

Jeffrey Palermo's Twitter Follow to stay informed about future events!

DEVintersection Conference — Dec. 7th‒9th in Las Vegas, Nevada

Cybersecurity Awareness Month | CISA

Cybersecurity Awareness Month | National Cybersecurity Alliance (NCSA)

NordVPN

ExpressVPN

STRIDE Model

GitHub

DevSecOps

SharePoint

One Drive

Azure Front Door

Azure Application Gateway

FxCop

Roslyn

Sonarqube

OWASP Top Ten

Top 25 Most Dangerous Software Errors CWE/SANS

2021 CWE Top 25 Most Dangerous Software Weaknesses

Want to Learn More?

Visit AzureDevOps.Show for show notes and additional episodes.

Avsnitt(385)

Bob Ward: SQL Server - Episode 321

Bob Ward: SQL Server - Episode 321

Bob Ward is a Principal Architect for the Microsoft Azure Data team, which owns the development for Microsoft SQL Edge to Cloud. Bob has worked for Microsoft for 30-plus years on every version of SQL Server shipped from OS/2 1.1 to SQL Server 2022, including Azure SQL. Bob is a well-known speaker on SQL Server, Azure SQL, AI, and Microsoft Fabric, often presenting talks on new releases, internals, and specialized topics at events such as SQLBits, Microsoft Build, Microsoft Ignite, PASS Summit, DevIntersection, and VS Live. You can also learn Azure SQL from him on the popular series aka.ms/azuresql4beginners. You can follow him at @bobwardms or linkedin.com/in/bobwardms. Bob is the author of the books Pro SQL Server on Linux, SQL Server 2019 Revealed, Azure SQL Revealed, and SQL Server 2022 Revealed, available from Apress Media. Topics of Discussion: [4:22] Bob's long history with Microsoft and the evolution of SQL Server. [6:41] What are the big use cases that SQL Server can now do? [7:38] Beyond RDBMS framework. [9:34] Building innovation off an already trusted brand. [9:50] What's the vision of AI on SQL Server? [10:51] It's all about smarter searching. [14:26] AI assistance features in SQL Server, such as the SQL Copilot and natural language to SQL query generation. [16:02] Hybrid searching. [19:41] Challenges and opportunities in AI Integration. [20:43] Content moderation is now being added to the loop. [22:39] The categories of different models. [23:16] The potential for industry-specific models to enhance AI capabilities in fields like insurance underwriting. [28:19] Knowing which model to use. [33:17] The trend towards industry-specific training of AI models to better suit specific business needs. [34:07] The current vision for SQL Server. [35:22] Innovating in the cloud. [38:30] The potential for SQL Server to handle AI workloads on small form factors, such as edge devices and standalone boards. Mentioned in this Episode: Clear Measure Way Architect Forum Software Engineer Forum Programming with Palermo — New Video Podcast! Email us at programming@palermo.net. Clear Measure, Inc. (Sponsor) .NET DevOps for Azure: A Developer's Guide to DevOps Architecture the Right Way, by Jeffrey Palermo — Available on Amazon! Jeffrey Palermo's Twitter — Follow to stay informed about future events! Ep 162 with Bob Ward Bob on LinkedIn Azure SQL Revealed: The Next-Generation Cloud Database with AI and Microsoft Fabric SQL-AI-Samples Samples Intelligent Applications with Azure SQL Database LangChain Want to Learn More? Visit AzureDevOps.Show for show notes and additional episodes.

28 Okt 202440min

Jeff Wouters: PowerShell Programming - Episode 320

Jeff Wouters: PowerShell Programming - Episode 320

Jeff was born and raised in The Netherlands and is an IT geek with a passion for automation. At the young age of 6, he had his very first computer and started developing his own Pacman to learn Batch programming. Looking back, the performance was terrible, but it worked. Over the years, he has always kept in touch with some sort of scripting or programming languages, such as Batch, (Turbo) Pascal, PHP, Delphi, Kixtart, Visual Basic Scripting (VBS), VB .NET, PowerShell, and C# .NET (Core). He is the owner of Methos, a consultancy and managed services company from The Netherlands focused on Microsoft Modern Workplace (Windows + Intune + Office365) and Azure through automation and Infrastructure-as-Code. Topics of Discussion: [4:19] Jeff's passion and the three turning points in his career. [8:47] The architecture and intention behind PowerShell being built on .NET. [12:33] What are the biggest mistakes Jeff sees people making when it comes to PowerShell? [11:50] Best practices for using PowerShell in DevOps environments, and common mistakes to avoid. [16:04] Differences between binary and PowerShell-based modules, and the benefits of exploring module code. [18:18] Leveraging .NET code in PowerShell scripts and the advantages of this approach. [20:00] Preferred methods for writing automated tests for PowerShell code. [23:39] Jeff's current focus areas, including certifications and his upcoming "script portal" project. Mentioned in this Episode: Clear Measure Way Architect Forum Software Engineer Forum Programming with Palermo — New Video Podcast! Email us at programming@palermo.net. Clear Measure, Inc. (Sponsor) .NET DevOps for Azure: A Developer's Guide to DevOps Architecture the Right Way, by Jeffrey Palermo — Available on Amazon! Jeffrey Palermo's Twitter — Follow to stay informed about future events! Jeff on Twitter Jeff on LinkedIn Jeff Wouters Methos jeff@methos.nl Want to Learn More? Visit AzureDevOps.Show for show notes and additional episodes.

21 Okt 202433min

Database Hygiene: Grant Fritchey - Episode 319

Database Hygiene: Grant Fritchey - Episode 319

Grant Fritchey has over thirty years of experience in IT, specializing in development and database administration. He works for Red Gate Software as a Product Advocate and writes articles for SQL Server Central and Simple-Talk. He is the author of "SQL Server Execution Plans" and "SQL Server Query Performance Tuning." He also co-authored "Query Store for SQL Server 2019," "Expert Performance Indexing," "SQL Server MVP Deep Dives 2," "Beginning SQL Server 2012 Administration," and "Pro SQL Server 2012 Practices." He presents at conferences and user groups worldwide and is available for part-time, short-term consulting contracts.Since 2009, he has been recognized as a Microsoft SQL Server MVP. He has received the AWS Community Builder award for the past five years. In 2014, he was honored as a Dunn & Bradstreet MVP, and in 2011, he received the Tech10 Award in Rhode Island. Topics of Discussion: [:35] Introduction of Grant Fritchey and his career in IT and database administration. [3:23] Grant's journey from software development to becoming a DBA. [5:13] The importance of database selection and how different types of databases serve different needs. [11:27] Grant's view on the addition of document support to major database platforms. [13:29] Database hygiene basics and the importance of regular backups and restore practices. [19:26] The business side of database recovery and balancing cost with recovery objectives (RPO/RTO). [25:03] Grant's recommendations for testing database restores. [28:08] Automation in DevOps and the importance of human training in recovery processes. [31:53] Managing data warehouses and recovery strategies for large databases. [35:12] Resources for developers without dedicated DBAs to ensure good database hygiene. Mentioned in this Episode: Clear Measure Way Architect Forum Software Engineer Forum Programming with Palermo — New Video Podcast! Email us at programming@palermo.net. Clear Measure, Inc. (Sponsor) .NET DevOps for Azure: A Developer's Guide to DevOps Architecture the Right Way, by Jeffrey Palermo — Available on Amazon! Jeffrey Palermo's Twitter — Follow to stay informed about future events! SimpleTalk by Redgate ScaryDBA.com Grant Fritchey on X Want to Learn More? Visit AzureDevOps.Show for show notes and additional episodes.

14 Okt 202437min

Programming Windows: Dave Plummer - Episode 318

Programming Windows: Dave Plummer - Episode 318

Dave was a developer or development manager on each of the major operating systems from MS-DOS 6.2 through Server 2003 while at Microsoft from 1993 to 2003. He's worked on MS-DOS products, OLE objects, Win95, Windows NT, and the NT Pinball game. He also wrote and helped design the initial prototype of Windows Media Center. Dave also added Product Activation to the Windows platform including various anti-tampering mechanisms to prevent illegal copying of the product. He's also worked on Task Manager, Zip Folders, and Calculator as he focused on the Windows Shell. He currently runs a very popular online show called Dave's Garage on YouTube, where he demystifies various software engineering topics. Topics of Discussion: [:35] Introduction of Dave, his background, and his career at Microsoft. [3:47] Dave's experience at Microsoft in the 1990s: the environment, culture, and working with some of the best developers in the world. [5:19] What led Dave to work on the Windows shell and user interface development. [7:38] The challenges of porting code from Windows 95 to Windows NT and working with operating system differences. [9:25] Dave's work on Task Manager, Zip Folders, and Windows Media Center. [13:23] The state of software engineering today: Dave's take on modern systems, embedded programming, and the rise of AI. [14:34] Embedded systems programming: Dave's work with ESP32 chips, their features, and applications. [19:16] Thoughts on AI and its impact on software development: Will AI eventually write all the code? [21:14] The future of software engineering: How AI will change the role of developers and the need for debugging and architectural understanding. [22:47] Dave's advice for young programmers: Learning C++, Python, and the importance of understanding system architecture. Mentioned in this Episode: Clear Measure Way Architect Forum Software Engineer Forum Programming with Palermo — New Video Podcast! Email us at programming@palermo.net. Clear Measure, Inc. (Sponsor) .NET DevOps for Azure: A Developer's Guide to DevOps Architecture the Right Way, by Jeffrey Palermo — Available on Amazon! Jeffrey Palermo's Twitter — Follow to stay informed about future events! Github Dave Plummer Dave Plummer on X Dave's Garage You Can Learn the ESP32 World! Source Level Debugging NEW LED Project Programming the ESP32 From Scratch Want to Learn More? Visit AzureDevOps.Show for show notes and additional episodes.

7 Okt 202429min

Jeff Sutherland: The History of Agile - Episode 317

Jeff Sutherland: The History of Agile - Episode 317

Jeff is the co-creator of Scrum and a leading expert on how the framework has evolved to meet the needs of today's business. The framework he developed in 1993 and formalized in 1995 with Ken Schwaber has since been adopted by the vast majority of software development companies around the world. However, Jeff realized that the benefits of Scrum are not limited to software and product development. He has adapted this successful strategy for several other industries, including finance, healthcare, higher education, and telecom. As the CEO of Scrum Inc., Jeff sets the vision for success with Scrum. He continues to share best practices with organizations around the globe and has written extensively on Scrum rules and methods. With a deep understanding of business processes — gleaned from years as CTO/CEO of eleven different software companies — Jeff is able to describe the high-level organizational benefits of Scrum and what it takes to create hyperproductive teams. Topics of Discussion: [:35] Introduction of Jeff Sutherland, co-creator of Scrum. [3:47] Jeff Sutherland's background: His experience at West Point and lessons in making work visible. [5:19] Fighter pilot experiences that influenced the operational side of Scrum. [6:02] Transition to the Air Force Academy and work in AI at Stanford. [7:38] Learning complex adaptive systems and the origin of Agile from complex systems theory. [8:30] How complex systems theory impacts Scrum and Agile teams today. [9:25] Jeff's first experiences applying Scrum in the banking industry. [11:25] The development of Scrum and the 2001 Agile Manifesto. [12:57] Making work visible and organizing teams, from West Point to Toyota to the Agile Manifesto. [13:23] Fast forward to 2024: Issues in Scrum and Agile practices, including sprint lengths and backlog grooming. [14:34] Jeff's new book: First Principles in Scrum and its relation to Scrum technology stacks. [16:23] Building autonomous systems: Lessons from radiation physics, AI, and complex adaptive systems. [19:16] The influence of autonomous robots on the creation of Scrum. [21:14] Discussion of Scrum and AI, leading to "Extreme Agile." [22:47] Predictions for the future of Scrum and Agile: Teams becoming 30 to 100 times faster by 2030. [23:37] Example of AI in action: Developing a system to handle expense reports using Scrum principles. [29:37] Challenges with AI-generated code and the need for strong software architecture knowledge. [33:24] The importance of following Scrum "by the book" to achieve hyperproductivity. [35:30] Jeff's closing advice on adapting to extreme agile to stay competitive by 2030. Mentioned in this Episode: Clear Measure Way Architect Forum Software Engineer Forum Programming with Palermo — New Video Podcast! Email us at programming@palermo.net. Clear Measure, Inc. (Sponsor) .NET DevOps for Azure: A Developer's Guide to DevOps Architecture the Right Way, by Jeffrey Palermo — Available on Amazon! Jeffrey Palermo's Twitter — Follow to stay informed about future events! How the Agile Manifesto Came To Be Want to Learn More? Visit AzureDevOps.Show for show notes and additional episodes.

30 Sep 202438min

Ryan Riley: Leading a Software Engineering Team - Episode 316

Ryan Riley: Leading a Software Engineering Team - Episode 316

Ryan Riley is a Principal Software Engineer at Wise Rock in Houston, TX. He enjoys learning and collaborating on simple, creative solutions to problems, and implementing those solutions with others through teamwork, training, and mentoring. He has worked as a Solution Architect and Team Lead for local and remote teams, focusing on front-end UX and back-end, distributed applications and APIs to delight customers across many industries. Topics of Discussion: [:36] Intro to Ryan and his experience in software engineering leadership. [4:10] Ryan's early career journey and transition from the .com bubble to software development. [6:17] How Ryan stepped into leadership roles through initiative and team collaboration. [8:40] Balancing hands-on coding with team leadership in a long-term software engineering career. [12:10] The importance of experience and technical knowledge for effective leadership in development teams. [14:27] Empowering team members to lead projects and grow their skill sets. [18:15] Key non-negotiables for young developers, including pull requests, testing, and small commits. [21:28] Architectural patterns Ryan favors, like JSON APIs and balancing between monoliths and microservices. [28:55] Key strategies for supporting software in production and ensuring stability. [34:41] Challenges of cloud costs and performance and the importance of managing resources efficiently. Mentioned in this Episode: Clear Measure Way Architect Forum Software Engineer Forum Programming with Palermo — New Video Podcast! Email us at programming@palermo.net. Clear Measure, Inc. (Sponsor) .NET DevOps for Azure: A Developer's Guide to DevOps Architecture the Right Way, by Jeffrey Palermo — Available on Amazon! Jeffrey Palermo's Twitter — Follow to stay informed about future events! Panes of Glass Wizards of Smart James Riley Want to Learn More? Visit AzureDevOps.Show for show notes and additional episodes.

23 Sep 202439min

Erik Darling: Database Technical Debt - Episode 315

Erik Darling: Database Technical Debt - Episode 315

Erik Darling makes your database faster in exchange for money. He is a DBA, developer, and architect with a track record of tackling even the most challenging technical issues. He runs a SQL Server Consulting and Coaching practice. In addition to his consulting services, he is also passionate about blogging, training, and contributing to open-source projects that help with SQL Server troubleshooting. He's given many public speaking engagements on the topic at conferences and events around the world, like PASS Summit and SQLBits. Topics of Discussion: [2:57] Eric's journey into SQL Server and database performance tuning. [4:25] Challenges faced in early SQL Server work and evolving technical debt. [7:47] The standard problems with databases over time. [11:14] How technical debt shows up in SQL Server databases. [15:20] How abstraction layers like ORMs contribute to technical debt. [22:38] Performance issues as a result of technical debt in databases. [25:19] Key advice on database schema design to improve performance. [30:46] Key differences between Azure SQL DB and managed instances. [37:23] Staffing challenges and solutions for managing SQL Server environments. Mentioned in this Episode: Clear Measure Way Architect Forum Software Engineer Forum Programming with Palermo — New Video Podcast! Email us at programming@palermo.net. Clear Measure, Inc. (Sponsor) .NET DevOps for Azure: A Developer's Guide to DevOps Architecture the Right Way, by Jeffrey Palermo — Available on Amazon! Jeffrey Palermo's Twitter — Follow to stay informed about future events! Darling Data Darling Data on X Erik Darling Darling Data on LinkedIn Darling Data on TikTok Want to Learn More? Visit AzureDevOps.Show for show notes and additional episodes.

16 Sep 202446min

Kent Beck: Tidy First - Episode 314

Kent Beck: Tidy First - Episode 314

Kent Beck is an original signer of the Agile Manifesto, author of the Extreme Programming book series, rediscoverer of Test-Driven Development, and an inspiring Keynote Speaker. I read his TDD book 20 years ago. Topics of Discussion: [3:46] What led Kent to extreme programming? [7:52] What critical practices have stood the test of time? [10:58] The role of software design in Agile Development. [13:11] The inspiration behind Tidy First? [16:16] Why software design is both a critical skill and an exercise in human relationships. [22:05] What is "normalizing symmetry"? [25:04] Empirical design. [28:09] Design changes tend to be reversible. [30:41] Experimentation with the GPT phase of AI on publications. [35:13] Advice for young developers and programmers. Mentioned in this Episode: Clear Measure Way Architect Forum Software Engineer Forum Programming with Palermo — New Video Podcast! Email us at programming@palermo.net. Clear Measure, Inc. (Sponsor) .NET DevOps for Azure: A Developer's Guide to DevOps Architecture the Right Way, by Jeffrey Palermo — Available on Amazon! Jeffrey Palermo's Twitter — Follow to stay informed about future events! KentBeck.com Tidy First? Test-Driven Development Extreme Programming Explained Implementation Patterns Want to Learn More? Visit AzureDevOps.Show for show notes and additional episodes.

9 Sep 202439min

Populärt inom Politik & nyheter

p3-krim
svenska-fall
rss-krimstad
flashback-forever
rss-viva-fotboll
motiv
aftonbladet-daily
rss-vad-fan-hande
rss-sanning-konsekvens
aftonbladet-krim
krimmagasinet
dagens-eko
rss-krimreportrarna
olyckan-inifran
fordomspodden
spar
grans
svd-nyhetsartiklar
rss-frandfors-horna
svd-dokumentara-berattelser-2