Send us a textIn this episode of DevOps Sauna, Marc and Darren discuss the recent arrest of Telegram founder Pavel Durov by French authorities over allegations of failing to moderate criminal activities on the platform.They explore the complexities of Telegram's encryption practices, noting that while the platform claims to offer secure communication, its lack of default end-to-end encryption raises concerns.The conversation delves into the broader implications of platform security, comparing Telegram with other messaging apps like WhatsApp and Signal.For more content related to security, check out this episode on our DevOps Sauna podcast covering GitHub SBOMs, AI tools from Microsoft and GitLab, JetBrains Aqua, recent cyber threats, and more: https://www.eficode.com/devops-podcast/devops-news-innovations-and-cybersecurity-insightsTransform your software development with AI by prioritizing security in the fast-paced development lifecycle. Learn from our page: https://www.eficode.com/transforming-software-development-with-ai-and-devops

Send us a textHelen Beal, a renowned expert in DevOps and Value Stream Management (VSM), steps into the sauna with Marc and Darren to discuss the significance of experimentation in production environments and the role of leadership in driving successful DevOps transformations.Helen also explores the evolution and importance of Value Stream Management in modern DevOps practices and shares insights from working with organizations to improve their software delivery processes and how to effectively measure and manage value streams. This episode is a preview of the themes and discussions that will be explored at The DevOps Conference in Stockholm and Copenhagen in November 2024.Book your space to learn from Helen alongside other experts at The DevOps Conference: https://www.thedevopsconference.com/?utm_campaign=The%20DEVOPS%20Conference%2022&utm_source=Podcast Everything you need to know for a successful DevOps transformation can be found here: https://www.eficode.com/devops-transformation

Send us a textMarc and Darren discuss the recent CrowdStrike root cause analysis (RCA) following a significant incident where an update to their Falcon sensor caused around 8 million Windows computers to crash.The incident was traced back to an error in the software update that expected 20 inputs but received 21, leading to widespread blue screen crashes. The importance of thorough testing, including exploratory and canary testing, to catch issues before widespread deployment is covered by Marc and Darren, who also discuss the pressures in security software development. Rapid responses are critical, and this can lead to oversights.One of the key takeaways is the high quality and transparency of CrowdStrike's RCA, which provided a detailed timeline, technical explanations, and a third-party review. Marc and Darren advocate for shifting from traditional "root cause analysis" to a "contributing factors analysis" to avoid placing blame and encourage open communication and learning from mistakes.In this insightful episode, find out why fostering a generative organizational culture that encourages learning and transparency is so important, especially in security-focused development environments.Watch our webinar to see how DevOps practices and tools help you integrate security and compliance into your software development: https://www.eficode.com/events/compliance-and-security-in-the-devops-worldTake our DevSecOps assessment to reveal where you are and how to secure your pipelines, toolchain, and products both now and in the future: https://www.eficode.com/services/devsecops-assessment

Send us a textIn this season finale, Marc and Darren take a reflective journey through the most compelling episodes of late, encapsulating key themes in DevOps, AI, and security while reflecting on the insights shared by notable guests such as Amanda Brock and Cheryl Hung. They revisit key discussions on topics such as the challenges of AI in infrastructure, the importance of psychological safety, and the evolving landscape of open source software.Our hosts also delve into lighter moments, including an April Fool’s satire and lessons from everyday life, tying them back to the broader themes of technology and innovation.This finale not only recaps the season but also sets the stage for the exciting developments ahead in the world of DevOps.What do the virtues of the warrior and DevOps have in common? Find out how Wu De serves as a guiding framework in many situations in life, including DevOps consultancy: https://www.eficode.com/blog/become-a-wu-de-devops-consultantWe created an in-depth overview of AI and DevOps and how you can transform your software development: https://www.eficode.com/transforming-software-development-with-ai-and-devops

Send us a textIn this episode of DevOps Sauna season 4, Darren and Marc delve into key DevOps and security updates, focusing on GitHub's potential new standard for SBOMs and its collaboration with JFrog. They joke about their reliance on ChatGPT, given its recent outage, and discuss the concerning frequency of cyber attacks, referencing significant breaches such as Ticketmaster's.Among the several topics covered in this episode are Microsoft's AI integration in DevOps workflows, GitLab's new AI tools, OpenTofu's recent security-enhanced release, JetBrains' new Aqua IDE for test automation, and GitHub's artifact attestations for supply chain security.With all this talk of security, Marc and Darren address the recent PyTailor malware threat before wrapping up with GDPR and data protection issues in the UK, underscoring the importance of robust security measures.Get the latest on GitLab, GitHub Enterprise Server, Jenkins, Artifactory, Xray, and SonarQube LTS in our Root release blog post: https://www.eficode.com/blog/root-whats-new-june-2024Watch our webinar and learn how to maximize your software development with GitLab's AI-powered DevSecOps platform: https://www.eficode.com/events/gitlab-ai-platform-devsecops-event

Send us a textDan Plumbley, Eficode's first GitLab champion, joins hosts Marc and Darren for an episode exploring GitLab. The discussion highlights GitLab's holistic approach, incorporating project management, CICD pipelines, and security features within a single platform.Dan covers the integration of open-source tools that provide a seamless user experience with minimal context switching. The introduction of GitLab's AI offering, Duo, is also explored, showcasing its capabilities in code suggestions, security assessments, and refactoring, which enhance code quality and maintainability.The trio touches on GitLab's evolution from an underdog to a leader in the DevOps space, with notable adoption by major global entities.Our webinar will help you maximize your software development with GitLab's AI-powered DevSecOps platform: https://www.eficode.com/events/gitlab-ai-platform-devsecops-eventNo matter your experience with DevOps tooling, we can enhance your experience and capabilities: https://www.eficode.com/root/gitlab

Send us a textIn this episode, Marc's anecdote about resolving a stuck bike axle underscores the importance of having diverse tools and approaches when tackling problems—a principle that extends to security where relying solely on one method can lead to vulnerabilities.Exploring the value of diverse strategies, redundancy, and rapid feedback loops in both mechanical problem-solving and security practices, our hosts emphasize the necessity of layered security, likening it to an onion with multiple defensive layers to deter threats like the Akira ransomware.Darren and Marc advocate for frequent testing across multiple levels to ensure the early detection of issues. They highlight the importance of addressing internal vulnerabilities caused by human error and draw parallels between security practices and mechanical problem-solving methodologies.Whether you're an IT professional, software developer, or anyone interested in improving project security, this discussion offers valuable strategies and perspectives to mitigate risks effectively.Gain a better understanding of how DevOps and cultural practices intertwine: https://www.eficode.com/guides/devops-for-executivesFor DevOps and cultural practices, information on driving successful DevOps transformations, and more, head to our page: https://www.eficode.com/devops-transformation

Send us a textIn this episode, Marc and Darren are joined by Sven Peters, Developer Advocate at Atlassian, discussing enhancing developer joy and productivity. Sven emphasizes that developers often understand their own problems, and management should listen to them. He discusses the increased cognitive load from responsibilities like observability and being on duty for microservices. Introducing "developer joy," Sven describes it as the balance of progress, quality, and value. He stresses reducing wait times and addressing unique team challenges.Sven highlights bridging the gap between developers and product managers through techniques like project kickoffs and feature leads to ensure developers understand the problems they are solving. He also underscores the necessity of contextualizing metrics for assessing productivity. The conversation explores the creative aspect of software development, differentiating it from mechanical processes.AI's impact on development is also covered with predictions into how it will change team dynamics, reduce traditional sprint planning, and alter team roles.Platform engineering is a valuable practice in simplifying development and creating a conducive environment for innovation and enjoyment. Check out our page to learn more: https://www.eficode.com/platform-engineeringAdapt for the future of AI-powered software development using our guide: https://www.eficode.com/guides/devops-trends-2024

Send us a textIn this episode, Marc and Darren are joined by colleagues Henri and Kalle to discuss the proactive role of DevOps in integrating AI into organizations. They emphasize the importance of robust security measures to manage risks and highlight the benefits and challenges of using AI, particularly large language models (LLMs), for apps like customer support and content creation.They address the complexities of data integration and governance and the need for automated solutions to handle the scalability of AI. Its role in improving human-computer interaction and the importance of maintaining data accuracy and security are also discussed. Marc emphasizes clear data governance practices similar to GDPR, advocating for transparency through an AI bill of materials. Henri and Kalle discuss the necessity of advanced DevOps practices, including specification-driven development and CI/CD pipelines for efficient IT processes.The conversation covers integrating requirements early into development value streams and maintaining rigorous verification and validation, particularly in secure environments, underscoring the proactive role of DevOps safety nets in enhancing software engineering.Extend your learning with our blog post on the four guiding principles of a healthy DevOps culture: https://www.eficode.com/blog/the-four-guiding-principles-of-a-healthy-devops-cultureTransform your software development with AI and DevOps using the information on our page: https://www.eficode.com/transforming-software-development-with-ai-and-devops

Send us a textDarren and Marc discuss the EU AI Act, the world's first regulation on artificial intelligence development. The Act, aimed at controlling and putting guardrails on AI development, is seen as a step towards addressing potential risks associated with AI, such as manipulation, bias, and exploitation. While acknowledging the Act's spirit of protecting against AI misuse, they express concerns about its potential impact on innovation, particularly for small and medium-sized enterprises (SMEs) in the AI space. They anticipate challenges in interpretation and enforcement, as well as potential lawsuits shaping the Act's implementation and effectiveness. Additionally, they ponder how the Act might affect marketing practices, emphasizing the need for transparency in AI systems and their interactions with people. The discussion also touches on the complexities of regulating AI and the implications for various industries and use cases.Learn more about AI in software development on our page: https://www.eficode.com/transforming-software-development-with-ai-and-devopsGet the key DevOps and machine learning trends for your software development processes from our guide: https://www.eficode.com/transforming-software-development-with-ai-and-devops

Send us a textIn this episode of DevOps Sauna, Marc and Darren are joined by Eficode UX and Accessibility Lead Annika, who emphasizes the importance of considering accessibility requirements and various user needs from the outset of any project. She shares her journey into accessibility work, highlighting its significance and intersection with user experience (UX). Annika discusses the technical aspects of accessibility, the importance of meeting minimum standards, and the necessity of manual testing alongside automated tools. The conversation delves into the impact of accessibility on users with impairments, the prevalence of accessibility needs, and upcoming legislation mandating accessibility in various sectors. Eficode's efforts in promoting accessibility are mentioned, along with practical tips to improve accessibility in your digital services.Join in the conversation at The DEVOPS Conference in Copenhagen and Stockholm and experience a fantastic group of speakers: www.thedevopsconference.com/?utm_campai…rce=PodcastLearn about our monthly Unicorn Stable sessions—open to all employees with an idea to pitch—and the innovations that have come from it.

Send us a textMarc and Darren discuss various topics, including the implications of edge computing on DevOps, the emergence of AI-generated code, controversies surrounding open-source licenses, the rise of start-ups focused on automating DevOps tasks, the widespread use of AI among developers, and the need for responsible innovation with Generative AI. They also touch on challenges in DevOps leadership and the importance of fostering a supportive environment for talent. Ultimately, while there are complexities and challenges in these areas, there's also optimism about the potential for positive change and innovation.Join in the conversation at The DEVOPS Conference in Copenhagen and Stockholm and experience a fantastic group of speakers: www.thedevopsconference.com/?utm_campai…rce=PodcastPrepare for the future of AI-powered software development with our DevOps Trends 2024 guide.

Send us a textIn this episode, Marc and Darren host Cheryl Hung, Senior Director of Infrastructure Ecosystem at Arm and founder of Cloud Native London. They discuss Arm's expanding role beyond mobile devices into data centers and infrastructure, highlighting increased software support for Arm processors. The conversation touches on trends like GitOps, WebAssembly (Wasm), and the shifting landscape of open-source licensing models. Cheryl also encourages community engagement and sharing knowledge through meetups and speaking opportunities. Overall, the episode offers insights into the evolving tech landscape and the importance of collaboration and open discourse.Join in the conversation at The DEVOPS Conference in Copenhagen and Stockholm and experience a fantastic group of speakers: www.thedevopsconference.com/?utm_campai…rce=PodcastIf you’re interested in getting new ideas for products with rapid time-to-market, check out our blog post.

Send us a textIn this episode of the DevOps Sauna podcast, Amanda Brock, CEO of OpenUK, explores the impact of AI-generated code on open source software. She addresses licensing complexities, ownership issues, and maintainer responsibilities. The discussion also covers the misuse of open source in AI contexts and concerns about regulations like the Cyber Resilience Act and the EU AI Act. Amanda emphasizes community engagement in setting standards to ensure fair regulation. She highlights the necessity of users complying with laws over licenses and the trend of shifting liability onto commercializers. Legal complexities around Generative AI and managing security vulnerabilities in sectors like government, finance, and healthcare are also discussed. Darren, Marc, and Amanda reflect on AI's broader implications for job displacement and the importance of expertise and discernment but remain optimistic about the positive impacts, such as more informed decision-making.Join in the conversation at The DEVOPS Conference in Copenhagen and Stockholm and experience a fantastic group of speakers: www.thedevopsconference.com/?utm_campai…rce=PodcastDiscover the power of GitHub Copilot for transforming your software development with AI pair programming.

Send us a textDarren and Marc discuss the concept of repatriation in DevOps in this episode of DevOps Sauna, advocating for a return to manual deployment and bare metal servers. They discuss the importance of treating servers like pets rather than cattle, emphasizing hands-on care and control over automated processes. They also touch on topics such as maintaining server room temperature, manual cable management, the value of monoliths in software development, and the idea of allowing servers to "work from home" rather than relying on cloud-based solutions.Join in the conversation at The DEVOPS Conference in Copenhagen and Stockholm and experience a fantastic group of speakers: www.thedevopsconference.com/?utm_campai…rce=PodcastCheck out our DevOps training.

Send us a textIn this episode, Marc and Darren explore stress in IT, covering the signs, types, and management strategies. They share personal experiences and offer practical tools like the three and four-panel methods for addressing stress-inducing situations. They advocate for seeking professional help, breaking the stigma around mental health conversations, and promoting psychological safety in the workplace. Overall, their conversation underscores the importance of recognizing and addressing stress to foster well-being in both personal and professional spheres.Join in the conversation at The DEVOPS Conference in Copenhagen and Stockholm and experience a fantastic group of speakers: www.thedevopsconference.com/?utm_campai…rce=PodcastLearn how to foster a healthy and balanced DevOps culture with the help of blameless postmortems.

Send us a textIn this episode, Marc and Darren discuss the feasibility and implications of creating a fully open source toolchain for software development. They explore various aspects of the toolchain, including version control, compliance, secure storage, documentation, task management, and more.Specific tools and their suitability for different purposes within the toolchain are explored. Darren evaluates options such as Gitea and GitLab for version control, SonarQube, and Aqua Security tools for compliance, and HashiCorp Vault for secure storage. Challenges in finding suitable replacements for commercial tools like Confluence for documentation and Jira for task management are also touched upon.Throughout the episode, trade-offs between open source and commercial solutions, such as cost, ease of use, and support, are acknowledged. Underestimating the technical investment required to maintain open source toolchains is cautioned against, while software-as-a-service (SaaS) platforms are suggested as a suitable alternative.Darren and Marc advocate for a pragmatic approach to toolchain selection, recognizing the benefits and limitations of both open source and commercial offerings. They emphasize the importance of considering factors such as scalability, support, and ease of integration when making decisions about software development toolchains.Join in the conversation at The DEVOPS Conference in Copenhagen and Stockholm and experience a fantastic group of speakers: www.thedevopsconference.com/?utm_campai…rce=PodcastWhether you need a single tool installation or a highly scalable, complete end-to-end toolchain, we can provide it.

Send us a textThis episode explores the concept of value stream mapping, emphasizing transparency, prioritization, and continuous improvement to optimize value creation within organizations. Through discussions on feedback loops and breaking down silos, Marc and Darren empower listeners with insights to enhance their software development processes and foster a culture of innovation and collaboration.Join in the conversation at The DEVOPS Conference in Copenhagen and Stockholm and experience a fantastic group of speakers: www.thedevopsconference.com/?utm_campai…rce=Podcast

Send us a textDarren and Marc discuss incident response in cybersecurity in this episode, with a focus on the importance of disconnecting rather than shutting down during security incidents.They cover the four phases of incident response: Discovery, analysis, action, and postmortem, highlighting the shift in cybersecurity from prevention to effective response due to the inevitability of breaches.They look at the complexity of achieving a perfectly secure system and stress the importance of continuous improvement and preparation in cybersecurity practices.Join in the conversation at The DEVOPS Conference in Copenhagen and Stockholm and experience a fantastic group of speakers: www.thedevopsconference.com/?utm_campai…rce=PodcastWant to know how your teams can get a grip on their service incidents? Read our blog post.

Send us a textMarc and Darren address the resistance to change within organizations when it comes to adopting new technology. They cover the challenges of traditional command and control hierarchies in modern workplaces, emphasizing the importance of involving knowledge workers in the change process for successful adoption.Also highlighted is the need for flexibility in selecting tools. They caution against tooling bias and stress the importance of management and developer buy-in for effective change management.The role of platform ownership and the importance of security considerations in change management is also covered.Marc and Darren conclude the episode with a reminder of the ongoing need for adaptation and growth in today's rapidly evolving landscape.Join us at The DEVOPS Conference GlobalFind out how we helped Nokia define operational models, processes, and system changes.