Thu, 26 October 2023 SE Radio 587: M. Scott Ford on Managing Dependency Freshness M. Scott Ford, the CTO of Corgibytes and host of the Legacy Code Rocks podcast, discusses managing dependency freshness. SE Radio’s Sam Taggart speaks with him about why dependency freshness is important to ensure that your code has all the latest bug fixes, how exactly to measure dependency freshness, and some of the insights that teams can gain from monitoring freshness over time. Brought to you by IEEE Computer Society and IEEE Software Magazine. Direct download: 587_m_scott_ford_managing_dependency_freshness.mp3 Category:guest/technology -- posted at: 12:01am CEST

Fri, 20 October 2023 SE Radio 586: Nikhil Shetty on Virtual Private Cloud Nikhil Shetty, an expert in networking and distributed systems, speaks with SE radio's Kanchan Shringi about virtual private cloud (VPC) and related technologies. They explore how VPC relates to public cloud, private cloud, and virtual private networks (VPNs). The discussion delves into why VPC is fundamental to building on the cloud, as well as configuring a VPC, subnets, and the address space that can be assigned to the VPC. During this episode they look into route tables, network address translation, as well as security groups, network access control lists, and DNS. Finally, Nikhil helps compare VPC offerings from Amazon Web Services (AWS) and Oracle Cloud Infrastructure (OCI). Direct download: 586_nikhil_shetty_on_virtual_private_cloud.mp3 Category:guest/technology -- posted at: 2:03am CEST

Thu, 12 October 2023 SE Radio 585: Adam Frank on Continuous Delivery vs Continuous Deployment Adam Frank, SVP of Product and Marketing at Armory.io, speaks with SE Radio’s Kanchan Shringi about continuous integration, continuous delivery, and continuous deployment – and how they differ. Frank suggests that organizations begin by identifying how the CI/CD process aligns best with their unique goals, noting that such goals might be different for B2C versus B2B SAAS (software as a service). They also discuss how the process can differ for monoliths compared to microservices-based products. Finally, they talk about continuous deployment as a service and some unique aspects of Armory’s approach. Direct download: 585_adam_frank_continuous_delivery_vs_continuous_deployment.mp3 Category:guest/technology -- posted at: 1:50am CEST

Thu, 5 October 2023 SE Radio 584: Charles Weir on Ruthless Security for Busy Developers Charles Weir—developer, security researcher, and Research Fellow at Security Lancaster—joins host Giovanni Asproni to discuss an approach that development teams can use to create secure systems without wasting effort on unnecessary security work. The episode starts with a broad description of the approach, which is based on Weir's research and on a free Developer Security Essentials workshop he created. Charles presents some examples from real-world projects, his view on AI's impact on security, and information about the workshop and where to find the materials. During the conversation, they consider several related topics including the concept of "good enough" security; security as a product decision; risk assessment, classification, and prioritization; and how to approach security in startups, greenfield, and legacy systems. Direct download: 584_charles_weir_ruthless_security.mp3 Category:guest/technology -- posted at: 9:07pm CEST