Goodbye SDLC, Hello SSDF! What is the Secure Software Development Framework?
This is the first article in a five-part series on the recently published NIST 800-218 ‘The Secure Software Development Framework (SSDF): Recommendations for Mitigating the Risk of Software Vulnerabilities’ Although the software development lifecycle (SDLC) has been around for a while, few SDLC models explicitly address software security in detail.
How Machine Learning Can Save You from Observability Overload
#DevOps teams are drowning in metrics, and it’s gotten harder for teams to interpret and take action on them. Machine learning can help sort out the data. #machinelearning #ML #observability
Assessing data infrastructure: the Principles of Open Scholarly Infrastructure
How do we create well-designed, trustworthy, sustainable data infrastructure and institutions? This is a question that I remain deeply interested in. Much of the freelance work I’ve been doin…
Markdown in all its flavors, interpretations, and forks won’t go away. However, it’s important to look at emerging content formats that try to encompass modern needs. In this article, Knut shares his advice against Markdown by looking back on why it was introduced in the first place, and by going through some of the major developments of content on the web.
Under the Lid: How AtomicJar is Reshaping Testcontainers - DevInterrupted
Sergei Egorov, co-founder & CEO of AtomicJar, wanted a way to make integrated testing simpler and easier. Today, Testcontainers powers over a million builds per month.
Managing Time-Series Data in Industrial IoT - The New Stack
Time- series data provides a shared context for sensor readings and becomes the critical fulcrum for processing and understanding Industry 4.0 IoT data.
DevOps and DevSecOps require agile documentation practices to deliver quality documentation on time with an iterative software delivery cycle. It's a similar journey to DevOps with a move to automation and a more agile approach to content. If documentation is only now entering your organization's DevOps discussions, it's time to catch your documentation practices up to DevOps. Here are the four levels of DevOps documentation maturity: [OS_EMBEDDED_MENU_RIGHT:]
The first time I took on the role of a lead engineer, a few years ago, I had a really hard time learning how to prioritize and delegate work. For much of my early career, I had simply never needed any planning skills beyond “say yes to everything and work yourself into the ground”. One of the best pieces of professional advice I’ve ever received came during this time, from a mentor who told me to delegate the things I was already good at. If I’m good at something, it means I’m actually equipped to evaluate whether my team is doing a good job. It also means I don’t need the practice as much, so delegating frees me up to improve other skills. There’s an oft-repeated myth about artificial intelligence that says that since we all know that humans are prone to being racist and sexist, we should figure out how to create moral machines that will treat human beings more equitably than we could. You’ve seen this myth in action if you’ve ever heard someone claim that using automated systems to make sentencing decisions will lead to more fairness in the criminal legal system. But if we all know that humans are racist and sexist and we need the neutrality of machines to save us—in other words, if we should delegate morality to AI—how will we ever know if the machines are doing the job we need them to do? And how will we humans ever get better?
Recursive Queries in PostgreSQL for Hierarchical Data
Recursive queries are typically used to deal with hierarchical or tree-structured data. A common example is when you have a manager employee relation in a table and you have to construct the organization tree under a manager or find all N level managers of an employee. Strictly speaking, this process is iteration not recursion, but RECURSIVE is the terminology chosen by the SQL standards committee.
PostgreSQL CTE: Common Table Expression From the docs:
I’ve been reading about different approaches to watermarking AI and the datasets used to train them. This seems to be an active area of research within the machine learning community. But, of…