Author: drweb

What does it take to secure AI agents without slowing developers down? A recent panel explored the answer  I recently joined Zach Lloyd, founder and CEO of Warp; Gavriel Cohen, co-founder and CEO of NanoCo and creator of NanoClaw; and moderator Moriah Hara, founder of a community of more than 3,000 CISOs and a three-time Fortune 500 CISO, for a discussion on one of the biggest challenges facing enterprise security teams today: how to safely unlock the productivity of agentic AI. The rapid rise of agentic AI in the enterprise is putting CISOs in a tough spot. On one hand,…

Read More
SQL

I’m sure many of you are using AI regularly, perhaps chatting, perhaps using some sort of agent. I’m doing the same, but in this case, I had it tackle an issue that’s been inconsistent for me with the Data API Builder and it solved it. Something I’ve struggled to do with docs and Google.This is part of a series of experiments with AI systems.The ScenarioI’ve been doing some work with the Data API Builder, letting it provide me access to data through REST and GraphQL. Lately, it added MCP as well, and I’ve been updating a talk as well as…

Read More

You do not need a software engineering job on your résumé before taking on freelance Python work. You need proof that you can take a small, messy problem and return something reliable. That distinction saves beginners a lot of wasted time. Clients rarely care how many tutorials you completed. They care whether the sales report arrives on Friday, the API stops returning errors, or the data finally lands in the correct spreadsheet. Your first assignment will probably be ordinary. Good. Ordinary problems are easier to define, price, and finish. What do clients pay Python freelancers to do Python freelance work…

Read More

A developer pulls a package from a reliable repo. It is signed, has provenance, and has been scanned. And then…it contains malware.That is no longer hypothetical. When the Miasma worm tore through the @redhat-cloud-services npm namespace in June, its malicious releases carried real SLSA provenance, because they were built in Red Hat’s own GitHub Actions workflows and published with legitimate OIDC tokens minted for those runs. To a registry scanner, the poisoned versions were indistinguishable from a routine update.The closest analogy is a deepfake. On a video call, a synthetic face can pass at first glance, and you only catch…

Read More

Your Python application runs perfectly on your laptop, but when you deploy it to production, surprises begin: slow requests, random service outages, and unexplained delays as load increases. The good news is that most performance issues can be resolved during the infrastructure selection stage, rather than with endless patches in the code after the fact. That’s why many Linux VPS for developers offer flexible configuration, predictable performance, and the ability to quickly scale resources to suit the task. A server can be selected for a specific technology stack in just a few clicks, whether the project uses Django, FastAPI, or…

Read More

Most sysadmins don’t realize there’s an IP conflict until something goes offline. That’s where IP address management (IPAM) tools help. They keep track of IP addresses so you can spot conflicts before they cause problems. Managing a handful of IP addresses is easy. But as your network grows, keeping track of hundreds or even thousands of addresses in a spreadsheet quickly becomes difficult. Before long, it’s hard to know which IP addresses are already in use, which ones are available, and where your next conflict might occur. That’s where IP Address Management (IPAM) comes in. IPAM is the process of…

Read More

TL;DR — Key Takeaways AI-generated code is accelerating delivery—and overwhelming review processes built for human-speed development. More code means more risk. Security flaws, dependency changes, technical debt and architectural drift become harder to spot as AI output scales. Visibility is becoming the leadership advantage. Teams need live signals from the codebase, not just tickets, issue counts and planned-work metrics. AI coding is a governance decision, not merely a tooling decision. Automated review, code-quality analysis and security testing must scale alongside generation. AI code generation has delivered on its first promise. Teams are shipping more, covering more test cases, and moving…

Read More