Security belongs in the software delivery pipeline. The harder question is where, how often and at what cost.Many pipeline teams eventually add security scanning to CI/CD, and relatively few go back afterward to measure what it actually cost the delivery process. Security coverage went up. Something else changed too, and it is rarely measured with the same rigor.“Shift left” gets treated as a free upgrade: catch problems earlier, at lower cost, with no real downside. That is true for the cost of fixing a vulnerability. It is not automatically true for the cost of running your pipeline. A security control…
Author: drweb
Your second skill was never a parachute, and the proof is six hundred years old. In 1349, with the Black Death tearing through England, the king’s council passed an emergency law to freeze wages, then spent the next forty years trying to outlaw basic supply and demand. Understanding why that effort failed is the clearest way to understand what is happening to our own careers today.The same balance, drawn twice. Labour outweighs capital above. Below, it does not.The Black Death reached England in 1348 and killed somewhere between a third and a half of the population within roughly two years.…
A major technical outage struck GitHub on Monday morning, disrupting workflows for millions of developers worldwide for several hours as critical services, automated testing pipelines, and artificial intelligence (AI) coding tools suffered high error rates.The hosting platform — a subsidiary of Microsoft Corp. that supports roughly 180 million users — first reported performance issues around 9:40 a.m. EDT. The disruption quickly escalated as thousands of users flooded outage-tracking platforms like Downdetector to report failing repositories, broken downloads, and degraded performance.At the peak of the incident, GitHub confirmed error rates of approximately 20% across its web interface and API traffic. Core…
Now in Docker AI Governance: a single searchable record of every policy decision your agents trigger, streamed to the SIEM your security team already runs, so you can show what your agents did and what your policy stopped. Today, Docker AI Governance now streams every policy decision in your organization into the SIEM your security team already runs, with a searchable record of all of it in Docker Cloud. You can see what your agents did, and what your policy stopped them from doing. Enforcement is step one Somewhere in the past year, supply-chain attacks stopped being isolated incidents. The…
TL;DR — Key Takeaways GitHub’s latest Copilot release points toward a future where developers routinely switch between AI models rather than relying on one. Kimi K3 and MAI-Code-1.1-Flash expand model choice, while VS Code adds per-turn model switching. Agent Plugins 1.0 brings a shared plugin system across Copilot surfaces, and Copilot CLI gains subagent management, queued prompts, headless autopilot, and /rewind. JetBrains adds Copilot Memory and Ollama support. The bigger issue for enterprise teams is governance: Copilot still doesn’t record which model contributed to which code. Most development teams don’t pick one AI model and stick with it anymore. They…
AI writes genuinely beautiful T-SQL queries. Aligned, aliased, commented, indented like a textbook. Beautiful has never meant correct, but we have spent thirty years treating it as a signed affidavit.Here is a thing I only noticed recently, having relied on it my entire career without ever saying it out loud.Bad code used to look bad. It dressed for the occasion.Not always. But usually. The query written at midnight by somebody who had stopped caring looked like it had been written at midnight by somebody who had stopped caring. Ragged indentation. Aliases called a, b and aa. A comment that said — fix later dated 2017. The…
TL;DR — Key Takeaways Fully homomorphic encryption enables computation on encrypted data without exposing the underlying plaintext to the server. FHE applications follow a strict client-server model in which keys remain with the client and the server works only with encrypted data. Developers should first build a plaintext version that acts as the control for testing and debugging the encrypted implementation. Branching must often be replaced with branchless computation, while multiplicative depth needs to be minimized to preserve the ciphertext noise budget. Non-linear functions may require polynomial approximations, creating tradeoffs between accuracy, computational cost and noise. Choosing the right FHE…
TL;DR — Key Takeaways Alert storms can turn one underlying failure into dozens of pages, slowing triage and root-cause identification. AI-driven correlation groups related metrics, logs and traces into a single prioritized incident. Good correlation depends on shared telemetry context such as service names, environments, trace IDs and request IDs. Topology-aware correlation connects failures across dependent services, while pattern-based correlation learns from historical incidents. Correlation windows and confidence thresholds need tuning to avoid missing related alerts or creating oversized incidents. At 2 a.m., a payment service starts throwing errors. Within minutes, your observability stack fires off 40 alerts: Elevated latency…
Next, we’re going to wire up the client side of push notifications so the browser can actually…
IntroductionDuring a recent UiPath Test Cloud showcase with Tech Field Day, I had a chance to look past the usual “AI can automate testing” message and think about how agents might fit into a real enterprise delivery process. As a Cloud Solutions Architect with a DevOps mindset, I tend to look beyond whether a platform can automate a task and ask what happens once that automation becomes part of an actual operating environment. AI-assisted development is helping teams create and change software faster, but every one of those changes still has to be tested before it can be released with…