Send us a text

In this episode of DevOps Sauna, Marc and Darren discuss the recent arrest of Telegram founder Pavel Durov by French authorities over allegations of failing to moderate criminal activities on the platform.

They explore the complexities of Telegram's encryption practices, noting that while the platform claims to offer secure communication, its lack of default end-to-end encryption raises concerns.

The conversation delves into the broader implications of platform security, comparing Telegram with other messaging apps like WhatsApp and Signal.

For more content related to security, check out this episode on our DevOps Sauna podcast covering GitHub SBOMs, AI tools from Microsoft and GitLab, JetBrains Aqua, recent cyber threats, and more: https://www.eficode.com/devops-podcast/devops-news-innovations-and-cybersecurity-insights

Transform your software development with AI by prioritizing security in the fast-paced development lifecycle. Learn from our page: https://www.eficode.com/transforming-software-development-with-ai-and-devops

Send us a text

Helen Beal, a renowned expert in DevOps and Value Stream Management (VSM), steps into the sauna with Marc and Darren to discuss the significance of experimentation in production environments and the role of leadership in driving successful DevOps transformations.

Helen also explores the evolution and importance of Value Stream Management in modern DevOps practices and shares insights from working with organizations to improve their software delivery processes and how to effectively measure and manage value streams.

This episode is a preview of the themes and discussions that will be explored at The DevOps Conference in Stockholm and Copenhagen in November 2024.

Book your space to learn from Helen alongside other experts at The DevOps Conference: https://www.thedevopsconference.com/?utm_campaign=The%20DEVOPS%20Conference%2022&utm_source=Podcast

Everything you need to know for a successful DevOps transformation can be found here: https://www.eficode.com/devops-transformation

Send us a text

Marc and Darren discuss the recent CrowdStrike root cause analysis (RCA) following a significant incident where an update to their Falcon sensor caused around 8 million Windows computers to crash.

The incident was traced back to an error in the software update that expected 20 inputs but received 21, leading to widespread blue screen crashes. The importance of thorough testing, including exploratory and canary testing, to catch issues before widespread deployment is covered by Marc and Darren, who also discuss the pressures in security software development. Rapid responses are critical, and this can lead to oversights.

One of the key takeaways is the high quality and transparency of CrowdStrike's RCA, which provided a detailed timeline, technical explanations, and a third-party review. Marc and Darren advocate for shifting from traditional "root cause analysis" to a "contributing factors analysis" to avoid placing blame and encourage open communication and learning from mistakes.

In this insightful episode, find out why fostering a generative organizational culture that encourages learning and transparency is so important, especially in security-focused development environments.

Watch our webinar to see how DevOps practices and tools help you integrate security and compliance into your software development: https://www.eficode.com/events/compliance-and-security-in-the-devops-world

Take our DevSecOps assessment to reveal where you are and how to secure your pipelines, toolchain, and products both now and in the future: https://www.eficode.com/services/devsecops-assessment

Send us a text

In this season finale, Marc and Darren take a reflective journey through the most compelling episodes of late, encapsulating key themes in DevOps, AI, and security while reflecting on the insights shared by notable guests such as Amanda Brock and Cheryl Hung.

They revisit key discussions on topics such as the challenges of AI in infrastructure, the importance of psychological safety, and the evolving landscape of open source software.

Our hosts also delve into lighter moments, including an April Fool’s satire and lessons from everyday life, tying them back to the broader themes of technology and innovation.

This finale not only recaps the season but also sets the stage for the exciting developments ahead in the world of DevOps.

What do the virtues of the warrior and DevOps have in common? Find out how Wu De serves as a guiding framework in many situations in life, including DevOps consultancy: https://www.eficode.com/blog/become-a-wu-de-devops-consultant

We created an in-depth overview of AI and DevOps and how you can transform your software development: https://www.eficode.com/transforming-software-development-with-ai-and-devops

Send us a Text Message.

In this episode of DevOps Sauna Season 4, the hosts dive into the recent CrowdStrike incident, which caused widespread bluescreen errors and significant disruptions globally. They explore why a seemingly routine update was deployed simultaneously to all CrowdStrike users, resulting in massive system crashes.

Joined by security expert and previous host Andy Allred, the discussion covers the role of CrowdStrike as an endpoint detection and response (EDR) system, its necessity for running with high privileges in kernel space, and the challenges of maintaining such critical security software.

The conversation highlights the need for rigorous testing, canary releases, and robust observability to prevent similar incidents. The hosts also discuss the implications of regulatory requirements, the importance of continuous delivery models in DevOps, and the lessons learned from the CrowdStrike mishap.

Despite the complexity and scale of the recovery process, the consensus is clear: Continuous improvement in testing and deployment practices is crucial for the stability and security of modern IT environments.

Create value in every commit with continuous delivery: https://www.eficode.com/services/continuous-delivery

Learn how to secure your DevOps practices, how to meet the needs of different stakeholders, and about combining Agility, structure, and high security in software development: https://www.eficode.com/blog/events/devsecops-webinar-secure-continuous-development-in-it-environments

Send us a text

In this episode of DevOps Sauna season 4, Darren and Marc delve into key DevOps and security updates, focusing on GitHub's potential new standard for SBOMs and its collaboration with JFrog. They joke about their reliance on ChatGPT, given its recent outage, and discuss the concerning frequency of cyber attacks, referencing significant breaches such as Ticketmaster's.

Among the several topics covered in this episode are Microsoft's AI integration in DevOps workflows, GitLab's new AI tools, OpenTofu's recent security-enhanced release, JetBrains' new Aqua IDE for test automation, and GitHub's artifact attestations for supply chain security.

With all this talk of security, Marc and Darren address the recent PyTailor malware threat before wrapping up with GDPR and data protection issues in the UK, underscoring the importance of robust security measures.

Get the latest on GitLab, GitHub Enterprise Server, Jenkins, Artifactory, Xray, and SonarQube LTS in our Root release blog post: https://www.eficode.com/blog/root-whats-new-june-2024

Watch our webinar and learn how to maximize your software development with GitLab's AI-powered DevSecOps platform: https://www.eficode.com/events/gitlab-ai-platform-devsecops-event

Send us a text

Dan Plumbley, Eficode's first GitLab champion, joins hosts Marc and Darren for an episode exploring GitLab. The discussion highlights GitLab's holistic approach, incorporating project management, CICD pipelines, and security features within a single platform.

Dan covers the integration of open-source tools that provide a seamless user experience with minimal context switching. The introduction of GitLab's AI offering, Duo, is also explored, showcasing its capabilities in code suggestions, security assessments, and refactoring, which enhance code quality and maintainability.

The trio touches on GitLab's evolution from an underdog to a leader in the DevOps space, with notable adoption by major global entities.

Our webinar will help you maximize your software development with GitLab's AI-powered DevSecOps platform: https://www.eficode.com/events/gitlab-ai-platform-devsecops-event

No matter your experience with DevOps tooling, we can enhance your experience and capabilities: https://www.eficode.com/root/gitlab

Send us a text

In this episode, Marc's anecdote about resolving a stuck bike axle underscores the importance of having diverse tools and approaches when tackling problems—a principle that extends to security where relying solely on one method can lead to vulnerabilities.

Exploring the value of diverse strategies, redundancy, and rapid feedback loops in both mechanical problem-solving and security practices, our hosts emphasize the necessity of layered security, likening it to an onion with multiple defensive layers to deter threats like the Akira ransomware.

Darren and Marc advocate for frequent testing across multiple levels to ensure the early detection of issues. They highlight the importance of addressing internal vulnerabilities caused by human error and draw parallels between security practices and mechanical problem-solving methodologies.

Whether you're an IT professional, software developer, or anyone interested in improving project security, this discussion offers valuable strategies and perspectives to mitigate risks effectively.

Gain a better understanding of how DevOps and cultural practices intertwine: https://www.eficode.com/guides/devops-for-executives

For DevOps and cultural practices, information on driving successful DevOps transformations, and more, head to our page: https://www.eficode.com/devops-transformation

Send us a text

In this episode, Marc and Darren are joined by Sven Peters, Developer Advocate at Atlassian, discussing enhancing developer joy and productivity. Sven emphasizes that developers often understand their own problems, and management should listen to them. He discusses the increased cognitive load from responsibilities like observability and being on duty for microservices. Introducing "developer joy," Sven describes it as the balance of progress, quality, and value. He stresses reducing wait times and addressing unique team challenges.

Sven highlights bridging the gap between developers and product managers through techniques like project kickoffs and feature leads to ensure developers understand the problems they are solving. He also underscores the necessity of contextualizing metrics for assessing productivity. The conversation explores the creative aspect of software development, differentiating it from mechanical processes.

AI's impact on development is also covered with predictions into how it will change team dynamics, reduce traditional sprint planning, and alter team roles.

Platform engineering is a valuable practice in simplifying development and creating a conducive environment for innovation and enjoyment. Check out our page to learn more: https://www.eficode.com/platform-engineering

Adapt for the future of AI-powered software development using our guide: https://www.eficode.com/guides/devops-trends-2024

Send us a text

In this episode, Marc and Darren are joined by colleagues Henri and Kalle to discuss the proactive role of DevOps in integrating AI into organizations. They emphasize the importance of robust security measures to manage risks and highlight the benefits and challenges of using AI, particularly large language models (LLMs), for apps like customer support and content creation.

They address the complexities of data integration and governance and the need for automated solutions to handle the scalability of AI. Its role in improving human-computer interaction and the importance of maintaining data accuracy and security are also discussed. Marc emphasizes clear data governance practices similar to GDPR, advocating for transparency through an AI bill of materials. Henri and Kalle discuss the necessity of advanced DevOps practices, including specification-driven development and CI/CD pipelines for efficient IT processes.

The conversation covers integrating requirements early into development value streams and maintaining rigorous verification and validation, particularly in secure environments, underscoring the proactive role of DevOps safety nets in enhancing software engineering.

Extend your learning with our blog post on the four guiding principles of a healthy DevOps culture: https://www.eficode.com/blog/the-four-guiding-principles-of-a-healthy-devops-culture

Transform your software development with AI and DevOps using the information on our page: https://www.eficode.com/transforming-software-development-with-ai-and-devops