At Some Level, We’re Doing Security Wrong
Don MacVittie explains that today’s security approaches just aren’t cut out for the threats organizations face.
Technical Debt: Don’t Buy Buzzwords
Buying into the ‘next big new shiny thing’ only increases your technical debt. Don MacVittie advises only buying what’s necessary.
Generative AI: The 90% Rule
Don MacVittie explains his vision of generative AI – the 90% rule – and how it will help developers.
Unused Code: Proving a Negative
Don MacVittie says there’s a lot of unused code floating around out there – and that’s a big problem.
Steady On. We Still Have a Job to Do
AI-generated change is not significantly different than the last couple decades where change has become IT’s constant companion.
Convert COBOL Easily? Yes, Please!
IBM’s preview of an AI tool to convert COBOL to Java has Don MacVittie cheering.
What Are You Securing?
In the case of information security, we need to ask, “What, exactly, are we trying to protect?”
Low-Hanging Fruit, 2023 Edition: Part Two
Last time, we discussed setting up a comparative inventory system for your growing API footprint. The idea is that as security catches up to new technology deployments, enterprises will have to step up their game and implement those new technologies. API security is currently the biggest need because of exposure to the world, but not […]
Low-Hanging Fruit, 2023 Edition: Part One
We’ve been cranking it out, haven’t we? Generating cool new toys for the business, creating new infrastructure to host those new toys and trying our best to secure all this new stuff while maintaining both our sanity and our cadence. And we’re doing it. Kind of. One thing we’re naturally lagging behind on is security. […]
A Distributed Workforce is the New Normal
The sudden shift to a remote and distributed workforce forced organizations to consider security as an afterthought. Now, that has to change.
Automation or Concatenation?
We’ve been in a period of mergers and acquisitions for a while in the DevOps and DevSecOps spaces, and it seems to be heating up even more. Combined with products expanding to cover a more broad segment of the software development life cycle (SDLC) and strategic partnerships to cover more of the SDLC, it is […]
Defining ‘Best’
The tools you already have within your organization are capable of more than you think. Take advantage of them.
Monitor Toolchain Health, Too
Tool everything, because the software delivery toolchain is now the core of application development and deployment, Don MacVittie advises.
Identify Needs First
In several projects of late, I have noted a trend in otherwise rockstar IT departments: They identify an area that they wish to implement or approve and then set out to address it. So, “We need a new CI tool,” spawns a project to choose and implement a new CI tool, for example. But there […]
Must You Collect All That?
SEO: The amount of data collected and available to the average DevOps team is incredible. But it’s not all being used.
The Security Pipeline
Over the last few years, the ability to secure our applications has grown, and deep integration into the DevOps toolchain has, too. There are more tools doing more security checks protecting more of the infrastructure and source than there have ever been. The key is putting them to use intelligently. We now have the ability […]
It Is Time for DevOps to Focus on Ops
The advent of both Agile development and DevOps were great steps in improving an IT process that had become ossified, with policies that alternated between resistance to change and trying to do things better/faster. Between them, Agile and DevOps broke the cycle of resistance … but only for development. The confusion around CI/CD is a […]
Coming Soon: AutoOps
I’ve spent a lot of time looking at products in the DevOps toolchain and paying attention to where they are going, what they are doing that is new and how they are differentiated. That has led me to one inescapable conclusion: AutoOps is on the way. What is AutoOps? AutoOps is full robotic automation; the […]
Forget Change, Embrace Stability
DevOps is about change. It was introduced to accelerate change, and it has opened up a whole new world of tools and possibilities that are all based on the premise of changing IT. Starting with Agile, we now have DevOps variants and subprocesses that run the entire software development life cycle (SDLC) process. Want to […]
Is AI the Answer to Devs’ Documentation Problem?
I have written this blog half a dozen times over the years, but every once in a while something comes up that makes me realize I should revisit it once more for those in the back. This time, it was a social call with a group of friends, some of whom are in high-tech, all […]
Standardize: It’s Not the Where. Sometimes it’s Not the What
In our industry’s attempts to follow best practices that marketers assure us we must have or we are going to lose to our biggest competitor … No, wait, we’ll lose to that startup no one ever heard of … No, hold on, we’ll lose to foreign competition … No, wait … (okay, I’ll stop. You […]
The Right Tool for the Job: AI Edition
(Actually, the right job for the tool.) We are currently in a really weird space with regard to AI capability. For my AI friends, I will make the disclaimer that what we call AI today is not actually AI, it is more akin to LiSP “AI” than actual intelligence (and, in reality, is firmly somewhere […]
DevOps Onramp: Security on the Rise
I don’t normally advertise stuff in my blog, because that’s not what it is here for. It is here to offer you the thoughts and ponderings of someone like you, and advice you didn’t ask for. But today we’ll make an exception since I also blathered for Techstrong Group recently, and soon you’ll be able […]