DevOps Sauna from Eficode

Send us Fan Mail

In this episode, Marc and Darren chat with Charity Majors, co-founder and CTO of Honeycomb. They explore how Charity balances a public role in tech, her thoughts on leadership, and the importance of building diverse, inclusive teams.

Charity opens up about her journey with Honeycomb, her personal life, and why she values hiring junior engineers.

The conversation also touches on the future of AI in engineering and career paths, including the engineering-manager pendulum.

If you'd like to hear Charity speak at The DevOps Conference in Stockholm and Copenhagen in November, there's still time: https://www.thedevopsconference.com/?utm_campaign=The%20DEVOPS%20Conference%2022&utm_source=Podcast

Send us Fan Mail

In this episode of DevOps Sauna, Marc and Darren are joined by Dan Khurram to discuss a white paper that originated from a collaborative workshop focused on AI scenarios. The workshop, which involved various experts, explores the potential impacts of AI on businesses.

The conversation delves into the process behind creating the white paper, the different AI scenarios examined, and the balance between positive and negative impacts of AI.

A key focus in the discussion is the "AI for all" scenario, where they explore ethical considerations, governance challenges, and the ways AI could shape business operations and the workforce in the future.

Get the white paper here: https://www.eficode.com/ai-driven-product-organizations-of-the-future

Discover how DevOps supports the use of artificial intelligence and more: https://www.eficode.com/transforming-software-development-with-ai-and-devops

Send us Fan Mail

In this episode of DevOps Sauna, Marc and Darren discuss the recent arrest of Telegram founder Pavel Durov by French authorities over allegations of failing to moderate criminal activities on the platform.

They explore the complexities of Telegram's encryption practices, noting that while the platform claims to offer secure communication, its lack of default end-to-end encryption raises concerns.

The conversation delves into the broader implications of platform security, comparing Telegram with other messaging apps like WhatsApp and Signal.

For more content related to security, check out this episode on our DevOps Sauna podcast covering GitHub SBOMs, AI tools from Microsoft and GitLab, JetBrains Aqua, recent cyber threats, and more: https://www.eficode.com/devops-podcast/devops-news-innovations-and-cybersecurity-insights

Transform your software development with AI by prioritizing security in the fast-paced development lifecycle. Learn from our page: https://www.eficode.com/transforming-software-development-with-ai-and-devops

Send us Fan Mail

Helen Beal, a renowned expert in DevOps and Value Stream Management (VSM), steps into the sauna with Marc and Darren to discuss the significance of experimentation in production environments and the role of leadership in driving successful DevOps transformations.

Helen also explores the evolution and importance of Value Stream Management in modern DevOps practices and shares insights from working with organizations to improve their software delivery processes and how to effectively measure and manage value streams.

This episode is a preview of the themes and discussions that will be explored at The DevOps Conference in Stockholm and Copenhagen in November 2024.

Book your space to learn from Helen alongside other experts at The DevOps Conference: https://www.thedevopsconference.com/?utm_campaign=The%20DEVOPS%20Conference%2022&utm_source=Podcast

Everything you need to know for a successful DevOps transformation can be found here: https://www.eficode.com/devops-transformation

Send us Fan Mail

Marc and Darren discuss the recent CrowdStrike root cause analysis (RCA) following a significant incident where an update to their Falcon sensor caused around 8 million Windows computers to crash.

The incident was traced back to an error in the software update that expected 20 inputs but received 21, leading to widespread blue screen crashes. The importance of thorough testing, including exploratory and canary testing, to catch issues before widespread deployment is covered by Marc and Darren, who also discuss the pressures in security software development. Rapid responses are critical, and this can lead to oversights.

One of the key takeaways is the high quality and transparency of CrowdStrike's RCA, which provided a detailed timeline, technical explanations, and a third-party review. Marc and Darren advocate for shifting from traditional "root cause analysis" to a "contributing factors analysis" to avoid placing blame and encourage open communication and learning from mistakes.

In this insightful episode, find out why fostering a generative organizational culture that encourages learning and transparency is so important, especially in security-focused development environments.

Watch our webinar to see how DevOps practices and tools help you integrate security and compliance into your software development: https://www.eficode.com/events/compliance-and-security-in-the-devops-world

Take our DevSecOps assessment to reveal where you are and how to secure your pipelines, toolchain, and products both now and in the future: https://www.eficode.com/services/devsecops-assessment

Send us Fan Mail

In this season finale, Marc and Darren take a reflective journey through the most compelling episodes of late, encapsulating key themes in DevOps, AI, and security while reflecting on the insights shared by notable guests such as Amanda Brock and Cheryl Hung.

They revisit key discussions on topics such as the challenges of AI in infrastructure, the importance of psychological safety, and the evolving landscape of open source software.

Our hosts also delve into lighter moments, including an April Fool’s satire and lessons from everyday life, tying them back to the broader themes of technology and innovation.

This finale not only recaps the season but also sets the stage for the exciting developments ahead in the world of DevOps.

What do the virtues of the warrior and DevOps have in common? Find out how Wu De serves as a guiding framework in many situations in life, including DevOps consultancy: https://www.eficode.com/blog/become-a-wu-de-devops-consultant

We created an in-depth overview of AI and DevOps and how you can transform your software development: https://www.eficode.com/transforming-software-development-with-ai-and-devops

Send us a Text Message.

In this episode of DevOps Sauna Season 4, the hosts dive into the recent CrowdStrike incident, which caused widespread bluescreen errors and significant disruptions globally. They explore why a seemingly routine update was deployed simultaneously to all CrowdStrike users, resulting in massive system crashes.

Joined by security expert and previous host Andy Allred, the discussion covers the role of CrowdStrike as an endpoint detection and response (EDR) system, its necessity for running with high privileges in kernel space, and the challenges of maintaining such critical security software.

The conversation highlights the need for rigorous testing, canary releases, and robust observability to prevent similar incidents. The hosts also discuss the implications of regulatory requirements, the importance of continuous delivery models in DevOps, and the lessons learned from the CrowdStrike mishap.

Despite the complexity and scale of the recovery process, the consensus is clear: Continuous improvement in testing and deployment practices is crucial for the stability and security of modern IT environments.

Create value in every commit with continuous delivery: https://www.eficode.com/services/continuous-delivery

Learn how to secure your DevOps practices, how to meet the needs of different stakeholders, and about combining Agility, structure, and high security in software development: https://www.eficode.com/blog/events/devsecops-webinar-secure-continuous-development-in-it-environments

Send us Fan Mail

In this episode of DevOps Sauna season 4, Darren and Marc delve into key DevOps and security updates, focusing on GitHub's potential new standard for SBOMs and its collaboration with JFrog. They joke about their reliance on ChatGPT, given its recent outage, and discuss the concerning frequency of cyber attacks, referencing significant breaches such as Ticketmaster's.

Among the several topics covered in this episode are Microsoft's AI integration in DevOps workflows, GitLab's new AI tools, OpenTofu's recent security-enhanced release, JetBrains' new Aqua IDE for test automation, and GitHub's artifact attestations for supply chain security.

With all this talk of security, Marc and Darren address the recent PyTailor malware threat before wrapping up with GDPR and data protection issues in the UK, underscoring the importance of robust security measures.

Get the latest on GitLab, GitHub Enterprise Server, Jenkins, Artifactory, Xray, and SonarQube LTS in our Root release blog post: https://www.eficode.com/blog/root-whats-new-june-2024

Watch our webinar and learn how to maximize your software development with GitLab's AI-powered DevSecOps platform: https://www.eficode.com/events/gitlab-ai-platform-devsecops-event

Send us Fan Mail

Dan Plumbley, Eficode's first GitLab champion, joins hosts Marc and Darren for an episode exploring GitLab. The discussion highlights GitLab's holistic approach, incorporating project management, CICD pipelines, and security features within a single platform.

Dan covers the integration of open-source tools that provide a seamless user experience with minimal context switching. The introduction of GitLab's AI offering, Duo, is also explored, showcasing its capabilities in code suggestions, security assessments, and refactoring, which enhance code quality and maintainability.

The trio touches on GitLab's evolution from an underdog to a leader in the DevOps space, with notable adoption by major global entities.

Our webinar will help you maximize your software development with GitLab's AI-powered DevSecOps platform: https://www.eficode.com/events/gitlab-ai-platform-devsecops-event

No matter your experience with DevOps tooling, we can enhance your experience and capabilities: https://www.eficode.com/root/gitlab

Send us Fan Mail

In this episode, Marc's anecdote about resolving a stuck bike axle underscores the importance of having diverse tools and approaches when tackling problems—a principle that extends to security where relying solely on one method can lead to vulnerabilities.

Exploring the value of diverse strategies, redundancy, and rapid feedback loops in both mechanical problem-solving and security practices, our hosts emphasize the necessity of layered security, likening it to an onion with multiple defensive layers to deter threats like the Akira ransomware.

Darren and Marc advocate for frequent testing across multiple levels to ensure the early detection of issues. They highlight the importance of addressing internal vulnerabilities caused by human error and draw parallels between security practices and mechanical problem-solving methodologies.

Whether you're an IT professional, software developer, or anyone interested in improving project security, this discussion offers valuable strategies and perspectives to mitigate risks effectively.

Gain a better understanding of how DevOps and cultural practices intertwine: https://www.eficode.com/guides/devops-for-executives

For DevOps and cultural practices, information on driving successful DevOps transformations, and more, head to our page: https://www.eficode.com/devops-transformation