Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Blair Rampling
Dev News: React 19, Nuxt 3.11, a Python GUI, Tabnine LLMs
Already, there’s a lot of buzz about React 19. FreeCodeCamp has a breakdown of the new features by self-described frontend ninja Neha Sharma. One major issue that React 19 will tackle is the issue of excessive re-rendering, Sharma noted. “Developers have historically spent countless hours addressing this problem, which often leads to performance issues,” Sharma wrote. “The constant hunt for code causing re-rendering and the subsequent optimization efforts have been a recurring task for engineers.
2 Ways AI Assistants Are Changing Kubernetes Troubleshooting
2 Ways AI Assistants Are Changing Kubernetes Troubleshooting sponsor-kubeshop,sponsored-post-contributed, Featured image by Gabriel Gurrola on Unsplash. VOXPOP Try our new 5 second poll. It's fast. And it's fun! Should IBM Open Source Terraform? Should IBM donate the soon-to-be-acquired HashiCorp Terraform to the Linux Foundation? Yes, a vendor-neutral group like the Linux Foundation is the way to go. Yes, but to Apache, FSF or another less corporate-friendly open source governing body.
Can ChatGPT Save Collective Kubernetes Troubleshooting?
Decades ago, sysadmins started flooding the internet with questions about the technical problems they faced daily. They had long, vibrant and valuable discussions about how to investigate and troubleshoot their way to understanding the root cause of the problem; then they detailed the solution that ultimately worked for them. This flood has never stopped, only changed the direction of its flow.
Google Investigates a New Approach for Workload Isolation
There’s a delicate balance between isolating workloads based on security requirements while still optimizing for compute and resource efficiency. Machine isolation is a likely solution, but has had its limitations.
Page not found - The New Stack
404 This isn't the page you're looking for, because we couldn't find it. Here's a few options to try: Try A Search Typos happen. Try searching for the headline you were expecting to find here. Try The Frontpage If it was a recent story you'll likely find it on our Frontpage . Or maybe you'll find other stories that are even better . Still No Luck? Try contacting us to see if we can help. We admire your tenacity, and now we're dying to know what this page is that you just have to read.
KubeCon + CloudNativeCon EU 2023: Hello Amsterdam
In this latest edition of The New Stack podcast, we spoke with two of the event’s co-chairs who helped define this year’s themes for the show, which is expected to draw over 9,000 attendees: Aparna Subramanian, Shopify’s Director of Production Engineering for Infrastructure; and Cloud Native Infra and Security Enterprise Architect Frederick Kautz. For this episode, we delve into two subject matters: One is what attendees can expect from the conference itself this year.
Trivago Aggressively Monitors to Reduce Software Test Flakiness
Test flakiness is one of the main challenges with automated testing. It happens when test failures are triggered by issues unrelated to the application being tested. It’s tricky a problem to solve: How do you troubleshoot failures that aren’t necessarily failures? To combat the issue, online travel broker Trivago added monitoring practices to its testing workflow and reduced the end-to-end tests that failed from flakiness failures to just under 1%.
Railway Plans to Simplify Infrastructure for Developers
Railway’s goal is to make infrastructure simpler for developers, and one step it recently took to achieve that was revamping its CLI (command line interface) from Go to Rust. “Our message for the frontend and for web developers is that we’re making infrastructure tasks into buttons that you just press to get what you want,” David Banys, product marketing manager at Railway, told The New Stack.
IBM Aspera Faspex High-Speed File Transfer Has a Killer Bug
Now in an ideal world, this would just be a good teaching moment. In it, they explain how a remote attacker can exploit a YAML deserialization flaw for arbitrary code execution using specially crafted API calls to a now obsolete API call Guess what? We don’t live in such a world. Rapid7 has confirmed at least one recent case where a customer’s system was compromised.
Botkube - Building Bridges across the CNCF Landscape
It’s Day 1 at your new job as the first DevOps or platform engineer. You fill out a bunch of HR forms, sign into Slack and get your GitHub account connected to your organization. You chat with new colleagues and explore the infrastructure you’re now responsible for operating and maintaining. You quickly realize how little consistency there is in how developers deploy to Kubernetes.
At QCon: Why Generative AI Is Harmful to Earth and Society
There’s this seemingly unstoppable growth around generative AI right now. If it keeps going unchecked, it will have devastating effects both on the Earth and the people living on it. But, as Thoughtworks’ CTO Rebecca Parsons pointed out later in the day, “we suffer inconsistently.” Miley compared this growth to the greatest public works project in U.S. history — the interstate highway system.
Unlock the Next Wave of Machine Learning with the Hybrid Cloud
Machine learning is no longer about experiments. Most industry-leading enterprises have already seen dramatic successes from their investments in machine learning (ML), and there is near-universal agreement among business executives that building data science capabilities is vital to maintaining and extending their competitive advantage.
Bring Purpose to API Product Development with APIOps Cycles
APIOps is a methodology that combines the principles of API management, GitOps, and DevOps to streamline API deployment. It offers a way to manage the entire life cycle of APIs, from development to deployment, ensuring they are delivered quickly, securely and with high availability. The concept behind APIOps is to automate and simplify the process of creating, testing and deploying APIs, so teams can focus on developing new features and capabilities.
A Is for OpenStack Antelope
Today, it’s more than just an open source cloud, it’s become a component of the Linux, OpenStack, and Kubernetes Infrastructure (LOKI) trifecta stack. With the Antelope release, OpenStack brings a range of enhancements, including stronger integration with Kubernetes and other open source technologies, and expanded support for advanced hardware, catering to its rapidly growing user base.
JavaScript Library Lets Devs Add AI Capabilities to Web
AI company Hugging Face has released a new open source JavaScript library that allows frontend and web developers to add machine learning capabilities to webpages and apps. Traditionally, Python notebooks are the toolkit for data scientists, but for most web and frontend developers, it’s JavaScript. That’s why Hugging Face created its new HuggingFace.js library that will allow developers to leverage the startup’s capabilities on websites and apps.
ScyllaDB’s Incremental Changes: Just the Tip of the Iceberg
Is incremental change a bad thing? The answer, as with most things in life, is “it depends.” In the world of technology specifically, the balance between innovation and tried-and-true concepts and solutions seems to have tipped in favor of the former. Or at least, that’s the impression the headlines give. Good thing there’s more to life than headlines. Innovation does not happen overnight, and is not applied overnight either.
Historical Data and Streaming: Friends, Not Foes
Real-time event streaming has become one of the most prominent tools for software engineers over the last decade. In , Apache Kafka, the de facto event-streaming platform, is ranked as one of the highest-paying tech skills and most-loved frameworks. While obscure at its outset, there are now countless stories of companies using it at massive scale for use cases like gaming and ride-sharing, where latency must remain incredibly low.
Rich Harris Talks SvelteKit and What’s Next for Svelte
Work on the first major revision of Svelte is underway, according to Rich Harris, creator of the frontend framework. This comes on the heels of the team’s release of SvelteKit, a full stack framework for building web applications. “Now that SvelteKit is out, [is] pretty widely used and stable at this point, our attention is going to switch back to Svelte itself,” Harris told The New Stack.
Rust Support Is Being Built into the GNU GCC Compiler
“We’re actually reimplementing the compiler from scratch,” Cohen told the audience. Before a roomful of Rust developers — who presumably use Rust’s own compiler, rustc — Cohen began his talk by joking that using the GNU’s open source GCC compiler “is good for you.
The Distance from Data to You in Edge Computing
In recent months I’ve been taking a closer look at how data transfer works between the browser, the server, and the database, and have built a prototype application using Next.js and deployed it to Vercel to help visualize and calculate the distances that data has to travel between them. I’ve been asking folks on Twitter to “submit their edge” so I can build up a better picture of where in the world requests to and from my databases are coming from.
Check for Container Image Vulnerabilities with Trivy
Security should be one of the most important aspects of container deployments, especially for enterprise production environments that depend on highly scaled applications and services that will not only see massive demand but that will also interact with other services, servers, APIs, etc. If you skimp on security, you could leave your company open to hacking. All it takes is one hacker gaining access to a single container and they could wind up with the keys to your kingdom.
Palo Alto Networks Adds AI to Automate SASE Admin Operations
Whether one pronounces SASE as “sassy” or “sayce,” a secure access service edge is IT that is fast becoming central to enterprise systems as increasing amounts of data come into them from a multiplicity of channels. SASE is used to distribute wide-area network and security controls as a cloud service directly to the source of connection at the edge of the network rather than to a data center.
OpenAI's GPT-4 Can Analyze Visual Images, Pass Bar Exam
Earlier this week, OpenAI launched GPT-4, the latest in its series of large language models capable of reading, summarizing, translating and generating text in a way that seems almost human-like. GPT-4 is intended to be the successor to GPT-3.5, which is the model that the popular ChatGPT conversational tool is built upon.
Stephen Thaler Claims He's Built a Sentient AI
But as one of the AI industry’s pioneers, Thaler has led a fascinating and storied career — and he recently shared some highlights during an online talk for a March 1 Meetup of the Chicago and Washington D.C. branches of the Association for Computing Machinery (ACM). Thaler told his audience that he’d first started playing with neural networks back in the 1970s, to create alternate versions of the “have a nice day” smiley face.
How Tech Leaders Are Managing Anxieties after SVB Failure
Silicon Valley Bank held more than $209 billion in assets when it failed last Friday. The crisis meant that the company’s stated value of “trust one another and assume good intentions” was put into practice, according to Dan Lorenc, Chainguard’s CEO and co-founder. “During times of uncertainty, we lean on over-communication to our team, particularly when something may have a direct impact on the people that work here,” Lorenc said in an email response to questions from The New Stack.
Integral Applies Automation to Healthcare Privacy Compliance
When an organization wants to work with healthcare data, it has to go through a privacy certification process to comply with regulations like HIPAA. Through his work with clients at LiveRamp Health, Shubh Sinha found this a cumbersome, manual and expensive process.
Chatops: Where Automation, Collaboration and DevOps Culture Meet
If DevOps was meant to encourage transparency and collaboration, Kubernetes often becomes a convenient excuse for organizations who haven’t yet fully embraced the culture. If the Kubernetes cluster manages all the operations so well on its own — with declarative configuration and self-healing — organizations start to ask, “Why should developers need to know anything about operations anymore?” Kubernetes, like most cloud native technologies, hides complexity behind a few layers of abstraction.
You'll Soon Be Using Vulnerability Exploitability eXchange
With VEX, you can use SBOMs to help secure your code. The good thing about software bill of materials (SBOM), pronounced SBOMB — is they show you a complete inventory of your application’s open source components. That’s great, but as you examine all those bits and pieces, you’ll find many potential vulnerabilities. That’s great, but how can you tell the difference between killer holes and weak spots that could matter less? That’s where Vulnerability Exploitability eXchange (VEX) comes in.
Build Machine Learning Apps in Your Notebook with Tecton
Tecton, a machine learning (ML) “feature platform” company founded by the creators of Uber’s Michelangelo ML platform, today announced version 0.6 of its product. The update allows users to “build production-ready features directly in their notebooks, and deploy them to production in a matter of minutes,” said Mike Del Balso, co-founder and CEO of Tecton.
MIT-Created Compiler Speeds up Python Code
Python is a popular, beginner-friendly language. It’s also an interpreted language, which makes it easy to use but slower than a compiled language such as C or C++. At the large scale that becomes a problem, as Ariya Shajii, an MIT CSAIL Ph.D. graduate, and his colleague Ibrahim Numanagić noticed when working with genomics, which involved large data sequences.
A Deep Dive into the Security of IAM in AWS
Public clouds are valuable targets for cybercriminals looking to exploit vulnerabilities in organizations’ infrastructure. While the time frame for a potential breach can vary, it’s common for hackers to scan newly deployed cloud resources within a matter of minutes in search of weaknesses to exploit.
Women in Tech: Are We Making Any Progress?
While it’s true that gender-based challenges remain in the tech workspace, it is also true that the tech sector provides many opportunities for women. From development to security, tech writing to marketing, project management to the C-suite, the tech workspace remains attractive because it offers relatively high salaries, good benefits, flexible work arrangements, and the opportunity to participate in cutting-edge technological innovation.
What Is Cloud Patch Management?
In 2017, a major American credit bureau suffered one of the largest data breaches in history. Over 150 million people had their private records exposed as a result of this breach, ultimately resulting in hundreds of millions of dollars of financial damage to the organization (not to mention an incalculable amount of reputational damage). The cause? A vulnerable instance of the Apache Struts web framework that had a critical patch released over two months prior.
Which Features Does Your Platform Engineering Portal Need?
Platform engineering has emerged as a sociotechnical solution to fill in many of the gaps that have been missing in DevOps. In particular, platform engineering’s main benefits are how it can improve agility at scale and remove silos — even though this is what DevOps was supposed to do all along. Improving the developer experience is key, as it’s the main way to improve agility.
Zero-Day Vulnerabilities Can Teach Us About Supply-Chain Security
Was the Log4Shell vulnerability an anomaly or a precursor for the types of security incidents that organizations will face in the future? While the worst predictions about CVE-2021-44228 didn’t come true, every organization has a software supply chain that can be rendered vulnerable. Embedding open source third-party libraries is common development practice because it greatly speeds things up, but each library can be a source of risk.
How to Identify Your Wasteful Processes
Waste is a sneaky thing. If you were asked right now what percentage of waste existed within your organization’s processes, you’d probably say 20% to 30%. However, a closer look would show that your processes are more wasteful than you think. Humans spend endless hours on tasks like rearranging interviews, patching fleets with the latest security update, getting a copy of production data into development and getting basic observability and telemetry data.
From a Fan: On the Ascendance of PostgreSQL
The Stack Overflow 2022 developer survey has been out for a couple of weeks now, and it’s jam-packed with good information to help end users and tech vendors alike get a better handle on what software developers are into these days. The survey is based on responses from more than 70,000 participants representing a global community of developers with diverse backgrounds, interests and levels of experience.
Building Real-Time Location Intelligence Apps
Real-time location intelligence refers to the ability to gather, analyze and act on location-based data in real-time. Real-time location intelligence is used for a range of applications such as fleet management, smart cities, detecting threats in our airspace, smart agriculture, proximity marketing, telco network optimization, supply chain management and more.
How Solvo’s Co-Founder Got the ‘Guts’ to Be an Entrepreneur
When she was a student in her native Israel, Shira Shamban was a self-proclaimed “geek.” But, unusually for a tech company founder and CEO, not a computer geek. Shamban was a science nerd, with her sights set on becoming a doctor. But first, she had to do her state-mandated military service. And that’s where her path diverged.
The Role of Context in Securing Cloud Environments
Security teams waste significant time manually matching high-volume, low-risk alert data from many security products due to the constantly changing nature of cloud environments. Alert fatigue as well as a lack of prioritization and actionable information in these alerts may cause teams to miss critical issues. This problem is escalating, particularly since point solution strategies fail to secure modern cloud environments end to end.
Analyst Report: What CTOs Must Know about Kubernetes and Containers
Cloud native applications and microservices are essential for any modern business to effectively run. But tech executives can’t just buy off-the-shelf solutions or lift-and-shift legacy infrastructure into cloud native architectures without planning. Engineers need the right tools, teams and skills, yet it can be tough to know which tools to purchase, implement and how to calculate the return on investment (ROI).
How Secure Is Your API Gateway?
Quick, how many APIs does your organization use? We’re talking for internal products, for external services and even for infrastructure management such as Amazon’s S3 object storage or Kubernetes. If you don’t know the answer, you are hardly alone.
Cleaning and Interpreting Time Series Metrics with InfluxDB
Time series data is data you want to analyze and monitor over time. For example, you might want to know the water levels over the course of the day for a plant, or how much sunlight it receives and when. This is a simple but easy-to-understand example. Obviously on a larger scale the stakes can be higher. You could be monitoring server infrastructure in a data center or pressure of a machine on a factory floor.
2023: The Year to Minimize Toil
Last year was a tough one for many IT operations teams. The pace of digital change did not diminished, and the complex infrastructure that underpins increasingly business-critical services was beginning to creak. Teams were under pressure and often understaffed. And there’s likely to be no reprieve in 2023 with increasing persistent staffing challenges and mounting incident volumes.
Open Source Vulnerabilities Are Still a Challenge for Developers
Across all industry sectors, open source software continues to pose a challenge for software security. We’re all aware that vulnerabilities in commercial and open source software, applications, and operating systems can result in software supply-chain breaches, but now we’re seeing attackers who are targeting web applications, API servers, mobile devices and the software components required to build them.
Bullet-Proofing Your 5G Security Plan
With latency improvements and higher data speeds, 5G represents exponential growth opportunities with the potential to transform entire industries — from fueling connected autonomous vehicles, smart cities, mixed reality technologies, robotics and more. As enterprises rethink connectivity, 5G will be a major investment area.
Is WebAssembly Really the Future?
This statement portends a lot of things, about not only WebAssembly’s roadmap and development but also its current place in computing. Already, 37% of end user organizations have some experience deploying applications with WebAssembly, the CNCF reported. While many of these uses are for testing Wasm’s merits, WasmEdge and WAMR are the top runtimes used, according to the CNCF report.
JavaScript or WebAssembly: Which Is More Energy Efficient and Faster?
Which runs faster and is more energy-efficient: JavaScript or WebAssembly? The University of Minho in Portugal researched this very question and came to the conclusion that while JavaScript can be more energy efficient and faster than Wasm when it comes to in-lab micro-benchmarks, in real applications Wasm outshines JavaScript on speed and energy efficiency — sometimes by as much as 30% on average. And that’s with Wasm still in its early days.
Google Roadmap: Flutter to Integrate with JavaScript, Wasm
Google laid out an ambitious roadmap for its Dart framework, Flutter — including plans to support WebAssembly (Wasm) — at the Flutter Forward conference in Nairobi, Kenya. The internet giant is looking to its developer community to help build out the plan. It also released Dart 3.0 and Flutter 3.7. Flutter is Google’s open source mobile UI framework.
Getting Started with the New Botkube Slack App
Subscribe to stay up to date with all the latest news from Kubeshop By signing up you agree to receive promotional messages according to Kubeshop's Terms of Service Thank you! Your submission has been received! Oops! Something went wrong while submitting the form. Get the blog direct to your inbox
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Blair
Contact Blair, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack