no dogma podcast

Summary

Todd Gardner joins me to discuss web certificates, their expiry and CertKit.

Details

Who he is, what he does. What a certificate is, updating one, out of date certs, outages. No certificate. Move to full https. Certificate transparency logs, public; wildcard certificates. RSA key compromised - can decrypt old traffic; perfect forward secrecy - may be able to decrypt a single session. Certificate authority, how they work with browsers; the price of certificates; free certificates from Let's Encrypt. Certificate lifetime reduction. Bygone SSL problem, domain ownership vs certificate ownership, man in the middle. Browsers forced certificate lifetime change; automation required. Who is impacted.

Support this podcast

Full show notes
@toddhgardner.com
CertKit
Search Certificate Transparency Logs
The 47-Day Certificate Ultimatum: How Browsers Broke the CA Cartel

Summary

Mads Torgersen, the lead designer of C#, joins me to discuss what's new in C# 14.

Details

Who he is, what he does. His PhD. High and low level work. The language and the compiler. How the compiler enforces the language. Extension members - methods, properties, static, operators. Field backed properties. Going for a preview feature to full release; one feature that didn't make it. Null conditional assignment. Partial constructors; cognitive load of the language; optimized for heavy use and the professional developer; simple code vs simple language; the baggage of a C#. User defined compound assignment. Type unions - this year there is a design. dotnet run app.cs, language changes. Reducing boilerplate over the years.

Support this podcast

Full show notes
What's new in C# 14
C# Language Design Meetings
Other episodes with Mads

Summary

Ted Neward tells me about his job search that started in 2022. Part 2 of a 2 parter.

Details

Cover letters. The interviews, "elite code" - nothing to do with real programming jobs. Selling elite tests and tutorials, memorizing code. Showing that you can code, live coding. Ageism; cost of developers. Emotional aspects of the job search; much is out of your control; it can be devastating; accept help. Leverage the network, keep busy, keep the faith. How to find Ted.

Support this podcast

Full show notes
@tedneward.bsky.social
Ted's home page
Ted's blog post
Ted's LinkedIn

Summary

Ted Neward tells me about his job search that started in 2022. Part 1 of a 2 parter.

Details

Who he is, what he did. The job search begins. Companies are looking for "passionate" employees with specific skill sets. The job market in 2022. The COVID tech bubble. How he searched; false starts, near misses. Writing a book on the side. You need luck too. Customized resumes for roles. Applicant tracking systems.

Support this podcast

Full show notes
@tedneward.bsky.social
Ted's blog post

Summary

Jeff Fritz and I talk about glories of running .NET on Linux.

Details

Who he is, what he does. Where .NET runs. When it moved from Windows only. Arrival of .Net Core, open source. What changed in Microsoft for a move to multi-platform. .Net standard. Why try .NET on Linux. Flavors of Linux. .NET on Linux in Docker on the cloud. Types of Linux where .NET runs. CPUs. Ways to install .NET. Multiple versions of .NET can be installed. Ahead of time compilation. All the other tools you need, IDEs, Docker, databases including SQL Server. Publishing .NET as a container. .NET Aspire. Database IDEs. Maui. How to get started with .NET and Linux, Codespaces, live disks, WSL.

Support this podcast

Full show notes
@csharpfritz.com
Jeff's home page
Bryan's blog post on .NET on Linux
Building a container image with a Dockerfile

Summary

Tanya Janca talks about her new book and how to write secure code.

Details

Tanya's new book, why she is writing for the developer. Including code for multiple languages. What makes her book different. Starting with how to defend against vulnerabilities. Validation and sanitization. What zero trust is. Balancing too much security vs other needs. Supply chain attacks and accidents. Backing up and losing code. Excess security and workarounds. Sharing information about security breaches, making it ok to fail. Re-running security tests when code changes, using analysis tools. Testing legacy applications with compromised libraries, network segmentation, web application firewall. Where to get the book.

Support this podcast

Full show notes
Tanya's home page
Tanya's books
Other security podcasts

Summary

Mads Torgersen talks about what's new in C# 13, and some of what might be coming in C# 14.

Details

Upcoming release of C# 13, .NET Conf 2024. Params collections, use cases. Overload resolution priority. System.Threading.Lock, why a new lock type. Ref struct types, the underbelly of C#. Update on discriminated unions, but years away. Preview features - field keyword properties, extension everything.

Support this podcast

Full show notes
What's new in C# 13
C# Language Design - GitHub

Summary

Andy Gocke, lead of the native AOT and app model team at Microsoft answers listener's questions about native AOT.

Details

Future of Native AOT. Trimming support in third party libraries. Why .NET prefers its own JIT compiler over the LLVM MSIL backend. How much bigger with AOT be over MSIL and JIT. Where to follow libraries supporting AOT. Using AOT and GPUs. WASM performance. Can Native AOT replace Mono AOT. Plan for using dependency injection with AOT. When will the IDEs support for Native AOT. How to get in touch.

Support this podcast

Full show notes
@andygocke
Native AOT deployment
Native AOT on GitHub
Other C# Podcast Episodes

Summary

Stormy Peters talks about open source software and how to support the communities that create it.

Details

Who she is, what she does. What open source software is, what free means. Different types of OSS licenses, beerware, restrictive licenses. Commercial use of open software. Making OSS financially viable; tools that GitHub offers, most software is built on open source software. "We're not paying for free software!", normalizing paying for OSS; hard for companies to make payments; GitHub sponsors for companies. Individuals sponsoring/supporting OSS, getting in touch with maintainers. Barriers to getting involved. One-person projects. Sponsorship by programming language. Is anyone making enough money from sponsorship. How GitHub supports OSS developers; corporate sponsors. Copilot and its use of OSS. Future of OSS. How to get involved in OSS.

Support this podcast

Full show notes
@storming
Stormy's Wiki page
Stormy's web site
GitHub corporate sponsorship

Summary

Andy Gocke, lead of the native AOT and app model team at Microsoft talks about ahead-of-time compilation (AOT) in .NET.

Details

Who he is, what he does. Quick overview of ahead-of-time compilation (AOT); finding your code. Traditional compilation, interpreter vs compiler, translation from source to target languages. Operating systems, intermediate language (IL). There's always an interpreter. Just-in-time compilation (JIT); Java ran on multiple OSes, but .NET was Windows only; .NET ran on multiple architectures. Ready-to-run (R2R) and trimming. Tiered compilation, variable performance. R2R mixes precompiled and IL, native AOT only has precompiled. Trimming - getting rid of unneeded things, trouble with plugins and reflection; static analysis - don't ignore warnings. Why AOT was built, where it is a good fit. How much work it was; Core RT, low adoption, but good feedback. Good and bad use cases for AOT. For .NET 7 console apps and libraries, or if you don't get trim warnings; a single trim warning is too many. AOT and non-AOT OSS NuGet packages. .NET 8 support for ASP.NET. JIT and IL will not go away. AWS Lambda functions and AOT, exclusions, problems that might occur; trimmable all the way down. Getting started with AOT. Can't turn off trimming. Future of AOT.

Support this podcast

Full show notes
@andygocke
Native AOT deployment
Andy's de/serializer Serde-dn
More C# episodes