Send us a text

Open source powers nearly everything we build today—but what is it actually worth? Pinja and Stefan discuss Harvard’s $8 trillion estimate, how widely open source is used, and why central registries are under pressure. They touch on security risks, supply chain attacks, and what the EU Cyber Resilience Act means for companies using OSS. Finally, they look ahead at how AI and coding assistants might reshape open source development.

Send us a text

In this episode of DevOps Sauna, Pinja and Stefan talk about what truly makes a developer platform successful—and why forcing adoption never works.

They explore the “coffee and cookie principle,” the importance of trust between developers and platform teams, and how to create platforms people actually want to use.

Topics include building developer trust, identifying platform ambassadors, balancing freedom and governance, and strengthening collaboration across teams.

Whether you’re building your first internal platform or refining an existing one, this episode offers practical insights and real-world stories from the field of platform engineering.

Send us a text

What does it take to make AI truly trustworthy? Pinja and Stefan talk with Lofred Madzou, CEO of Skillmind, about responsible AI, governance, and strategy—plus why organizational culture matters more than hype. Lofred also shares his inspiring work with the African Olympiad Academy, nurturing the next generation of science innovators across Africa.

Send us a text

DevOps “culture” gets blamed for everything—so what is it, really? Pinja and Eficode consultant Dan Khurram cut through the buzzwords to define culture in practical terms: how decisions get made, what behaviors are acceptable, and how teams talk about uncertainty and failure. They compare textbook “DevOps culture” to actual corporate culture, then borrow lessons from high-stakes domains like aviation and healthcare on learning from incidents instead of hiding them. Along the way: onboarding as your first culture signal, Microsoft’s “learn-it-all” shift, and three takeaways you can apply now—don’t call it a culture change, define your “why” for your context, and start locally so good habits spread. If your transformation feels like more ceremonies than substance (hello, Jira), this episode gives you a clearer map. 

Send us a text

In this month’s DevOps Sauna news roundup, Pinja and Stefan unpack the biggest stories shaking the software world. Atlassian made major moves with billion-dollar acquisitions of DX and the AI-powered browser company behind Arc and Dia. GitHub tightens supply chain security after recent NPM attacks, while open source communities tackle burnout and project handovers.

The duo then dives into the shifting AI landscape—from XAI’s massive layoffs and declining corporate AI adoption to NVIDIA’s staggering $100 billion investment in OpenAI. They also discuss GitHub Copilot’s new tech-debt-fighting agents and Kubernetes’ long-awaited Dynamic Resource Allocation going GA.

Tune in for sharp insights, lighthearted banter, and the human touch that even AI can’t replace.

Send us a text

Are password changes really keeping us secure? Is writing passwords in a notebook always bad? Can Apple devices really not get viruses? In this episode of DevOps Sauna, Pinja and Darren take on some of the most common myths around cybersecurity. From password managers, MFA, and VPNs, to cloud security, insider threats, and even the risks of random USB sticks—no misconception is safe. Join us as we separate fact from fiction and uncover how security really works in practice.

Send us a text

In this episode, Pinja and Darren take a critical look at the state of DevSecOps through the lens of three recent industry reports from Snyk, Checkmarx, and Datadog. From “shift left” gone wrong, to the cultural gaps between development and security teams, to metrics that don’t always measure what matters—what’s really happening with security in DevOps today?

They discuss whether DevSecOps is truly “dead,” or simply in need of a reset, and explore practical steps teams can take to rebuild trust, reduce friction, and embed security as a natural part of development. Plus: the risks AI introduces into DevOps security, and why small steps can still make a big difference.

Send us a text

In this episode of DevOps Sauna, Pinja and Darren sit down with Eficode’s Lead AI Consultant, Henri Terho, to unpack the hype and realities around artificial intelligence in business. They explore why so many AI projects fail, what true success looks like, and how companies can actually see return on investment. From data quality challenges and security concerns to the legal landscape and the so-called “AI bubble,” the conversation digs into both the risks and the opportunities of AI transformation. Whether you’re curious about strategy, implementation, or the future of work, this episode sheds light on how organizations can make AI truly pay off.

Send us a text

A major security incident shook the JavaScript world when malicious code was discovered in 20 widely used NPM packages, collectively downloaded over 2 billion times per week. In this episode, Pinja and Darren break down what happened, how a phishing email led to the breach, and why human error remains one of the biggest risks in cybersecurity.

They explore the scope of the attack, its surprisingly small financial impact, and the broader lessons around open-source trust, dependency management, and the need for SBOMs. Plus, they discuss how tools like DependencyTrack can help developers protect their software supply chains, and why transparency in mistakes—like that shown by maintainer Josh Junon—is essential to building a stronger security culture.

Send us a text

In this episode of DevOps Sauna, Pinja and Darren dive into one of the most pressing topics of our time: the ethics of AI. From copyright infringement and data usage to environmental impact and corporate responsibility, they unravel the hidden costs behind today’s AI boom.

They explore how big tech handles data, the consequences of AI monopolies, and why regulation is a double-edged sword. Most importantly, they discuss what individuals, companies, and the industry at large can do to ensure AI is used ethically and responsibly.

If you’ve ever wondered whether AI can be ethical—or how you can use it more responsibly—this conversation is for you.