Author: drweb

Standardized developer environments promise to eliminate one of software engineering’s oldest explanations: “It works on my machine.” By packaging approved runtimes, dependencies and tools into containers, virtual machines or cloud workspaces, organizations expect every developer to start from the same foundation.The approach delivers clear benefits. It reduces onboarding time, minimizes dependency conflicts and makes development environments easier to reproduce. Yet developers using the same environment definition can still experience different build times, test results, network behavior or access failures. Local results may also differ from CI and production, despite sharing the same container image.A container defines only part of the…

Read More
SQL

SQL Server cost optimization has a problem nobody puts on the slide. The savings are real, the dollars are real, and none of it reaches the invoice. This is the story of how I found that out in front of people.I want to tell you about the best week of work I did last year, and then about the two hours at the end of it that I am significantly less proud of.There was a query on the busiest instance in the estate doing four point one million logical reads. I spent three days on it. Statistics, an index, a…

Read More

TL;DR — Key Takeaways Claude Code auto mode becomes the default on August 14 for Pro, Max and Team users. In testing, humans caught a disguised dangerous command just 13.6% of the time, while auto mode caught 89%. Production data cited by Anthropic showed serious unintended harm in 6.3% of manually approved sessions versus 2.4% with auto mode. The shift does not eliminate human oversight; it moves responsibility toward defining boundaries and permissions before an agent begins working. Enterprise, API and major cloud users remain opt-in for now, with broader default rollout expected later. Anthropic is removing a step most…

Read More
PHP

Twenty years is a lifetime in software engineering. Languages rise and fall. Frameworks become obsolete. Entire categories of developer tools appear, dominate the industry, and quietly disappear again. Yet through two decades of change at JetBrains, one engineer has remained focused on a remarkably consistent problem. How do you help developers build better software? This year marks Alexey Gopachenko’s twentieth anniversary at JetBrains. During that time, he has founded products including PhpStorm and WebStorm, helped build the analytics platform that today underpins product decisions across JetBrains, and helped Kateryna Shlyakhovetska with the evolution of Qodana from an internal idea into…

Read More
SQL

I was recently trying to handle a simple task with a few AI tools to see how well things worked. I realized that AI isn’t great for everything and there are times you need your judgment to stop fighting AI and use other tools.Tl;dr choose the shortest path and know your tools. In this case, just copy paste a script and results (see the bottom).This is part of a series of experiments with AI systems.The ScenarioI have a table with some data. I wanted to duplicate this table DDL and DML for another system. Here’s my table:Simple thing, right? Lots…

Read More

Hyperswitch is an open-source payments switch from Juspay that you can run on your own Linux server. This guide covers setting it up with Docker, checking the ports the stack opens, running a curl health check, and processing a test payment to make sure everything is working. Most payment integrations start out simple. You connect to one payment processor, add its SDK, and configure a few API keys. But things can quickly become more complicated. You might need a second processor because the first one declines cards from a particular country, then you may want to add payment retries. Over…

Read More
SQL

A better fire alarm is still a fire. Many SQL Server incidents I get called about were preventable with controls already available in the client’s environment. Here is the audit I wish had been run before the pager rang, complete with the T-SQL.I finished a root cause analysis recently that I was quietly proud of. It had everything a respectable incident document is supposed to have: a timeline to the second, the plan regression that started it, the parameter behind the regression, and the deployment three weeks earlier that changed the parameter.The document was accurate. That was the uncomfortable part.…

Read More

HackerOne has added a remediation capability to its H1 Platform that reduces the amount of time required to remediate validated vulnerabilities and other weaknesses affecting specific lines of source code.Nidhi Aggarwal, chief product officer for HackerOne, said H1 Remediation combines artificial intelligence (AI) and crowdsourced research to identify the root cause of issues that are traced back to specific lines of code. Designed to integrate with existing issue tracking tools and AI coding agents via a Model Context Protocol (MCP) server, the goal is to better prioritize remediation efforts in a way that reduces the amount of exposure debt that…

Read More

AI coding assistants write code fast. Whether that code can be trusted is a separate question, and it’s becoming a more urgent one. Surveys this year put average developer trust in AI-generated output at just above the midpoint of a five-point scale, and more than half of developers admit they ship AI code without testing it first. Coverage numbers on AI-written code often look fine on paper, but plenty of that coverage turns out to be shallow: tests that check a result isn’t null and call it a day.Microsoft is trying to close that gap with a new open-source agent…

Read More