Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Greg DeArment
Ease Kubernetes Deployments with Cloud Foundry’s Korifi
Last year, the Cloud Foundry Community returned to in-person events at KubeCon+CloudNativeCon NA 2022 held in Detroit. Key takeaways from talking with attendees at our booth were the overall awareness about Cloud Foundry capabilities and continued need for those and the organic popularity of our projects, like Paketo Buildpacks. You can read the full report about our experience here.
Finout Gets a Handle on Kubernetes Costs
As Kubernetes expands out from the domain of super-users (the internet-scale companies) and towards the enterprise, the cost of running Kubernetes clusters becomes an increasingly important factor in many operations. But how do you measure K8s usage on a per-dollar basis? Finout has expanded its cost analysis platform for enterprise software to Kubernetes, providing a way to understand the costs of running the open source orchestration tool.
Kubiya Launches First Generative AI for Platform Engineering
AMSTERDAM – As platform engineering becomes a more widely adopted discipline, the platform team’s to-do list only increases. And as developers adopt new best practices and tools, that team needs to upskill and understand more and more of the distributed, often seven-layer stack. The team whose goal is to reduce developer burnout, in turn, has its own ever-growing cognitive load to bear.
Twitter APIs Are Going Very Wrong
I mean, really, really wrong, even when you pay serious money to Twitter. Leaving aside Twitter owner Elon Musk‘s latest 13-year-old boy joke of “renaming” Twitter, “Titter,” Twitter’s most serious new annoyance is its new API pricing structure. It’s both irritating developers and driving some of them out of business. First, to catch you up, there are now three Twitter API tiers.
Strengthen Your Kubernetes Security with SecurityContext Settings
In Kubernetes, a pod is the smallest deployable unit that can be created and managed. Pods are generally designed to run a single container, but can also run multiple containers if needed. Running a pod without defining a security context can pose a security risk in a Kubernetes cluster. When a pod is created without a security context, it inherits the security context of its parent namespace, which may not provide adequate security measures.
There's Been a 400% Increase in Unique API Attackers
C-Level Discussion Their researchers also found that 80% of these attacks took place over authenticated APIs. They also found, unsurprisingly, that 94% of survey respondents experienced security problems in production APIs in the past year. The result is that 17% reported they’d suffered from a data breach, and 48% of respondents now consider API security a C-level discussion. Whether C-level executives, outside of the CIO, CISO, and CTO, even know what an API is another question.
WebAssembly: The Ultimate Guide
WebAssembly is arguably beginning to live up to its hype. Although whether it realizes its potential or not remains to be seen and its ultimate success largely depends on factors beyond its worth as a technology. Things that could hold it back include a lack of agreement about standardization devices on which it is deployed. Already, WebAssembly (aka Wasm) has been shown to work exceedingly well in the browser.
Using Window Functions in SQL
Window functions allow us to perform calculations on a subset of rows in a table, rather than the entire table. A window function performs a calculation across a set of rows that are related to the current row, based on a specified window of observations. They are used to calculate running totals, ranks, percentiles and other aggregate calculations that can help identify patterns or trends within groups. Let’s look at how to use window functions in SQL.
Samsara Gave Logistics Warehouse Real-Time Visibility, Control Over Ops
Just as data warehousing and data delivery operations need to be managed and tracked, so do physical brick-and-mortar warehousing and logistics operations. While both types need to be accurate and efficient, physical operations must also monitor the actions of people and equipment to ensure safety. Logistics Warehouse consisted of a small warehouse with only a few trucks when owner and chairman, Douglas Moore, purchased the company in 1999.
When 'Clean Code' Hampers Application Performance
“Many programming ‘best practices’ taught today are performance disasters waiting to happen,” warned Seattle-based programmer Casey Muratori on his educational web site, sparking a debate in the programming community. Some agreed, some disagreed, but lively online discussions ensued, with programmers around the web revisiting or defending long-held assumptions about best practices.
What eBPF Means for Container Threat Detection
This post is one of a series of posts previewing KubeCon + CloudNativeCon Europe 2023, April 18-21, Amsterdam. Join us there, to learn more about the transformative nature of cloud native applications and open source software. This blog post was adapted from a talk at osquery@scale 2022 given by Ryan Mack (vice president of engineering and head of infrastructure at Uptycs) and Christopher Stanley (a security engineer in the aerospace industry).
Walkthrough: Bitwarden's New Secrets Manager
It was only a matter of time before a popular password manager, such as Bitwarden, would create a secrets manager, an application to create and store security tokens so they don’t have to be hard-coded into the application itself. It makes sense, especially given that Bitwarden is open source and the folks behind it seem to understand the growing need for managing secrets in cloud native and container technology.
5 Dev Tips to Improve Your Largest Contentful Paint (LCP)
A “good” LCP is anything under 2.5 seconds. But “only 52.7% of sites meet the “good” LCP threshold”. So why is it so tricky to achieve develop? And how do we do a good LCP on this existing site?
Dev News: npm Attacks, htmx Updates and Flutter's Roadmap
A denial of service attack happened briefly after three attackers flooded the npm open source package repository for Node.js with bogus packets, according to Hacker News. The attackers created malicious websites and published empty packets with links to the websites, “taking advantage of open source ecosystems’ good reputation on search engines,” Checkmarx’s Jossef Harush Kadouri said in a blog post about the attacks.
Why Grafana Needs OpenTelemetry
Grafana is often considered to be the hands-down most popular observability platform for data visualization. OpenTelemetry has emerged as a key open source component to lend compatibility among the different observability platforms. It was just a matter of time before OpenTelemetry became a key staple for Grafana users.
Cloud Control Planes for All: Implement Internal Platforms with Crossplane
This post is part of a series of providing a preview of KubeCon + CloudNativeCon Europe 2023, which will be held April 18-21 in Amsterdam. Join us there to learn more about the transformative nature of cloud native applications and open source software. Over the last two decades, the rise of cloud computing has enabled the creation of countless new businesses and revolutionized how existing organizations operate and scale.
Pushup Offers Speed of Go in Web Development Framework
Pushup, a new open source Go Framework for building web pages, was born out of the rescue of healthcare.gov. The original healthcare.gov was in Java and had hundreds of machines running an application, according to Paul Smith, a software engineer who is now CTO and co-founder of digital services firm Ad Hoc. for its problems at launch.
Tech Backgrounder: Slim.AI Makes Container Hardening Easier
The Slim Developer Platform aims takes the pain out of vulnerability remediation and management for container-based applications. The platform can reduce vulnerability counts by 80% (on average) and equips developers and security professionals with tools to understand which vulnerabilities matter and which don’t.
There Is No Resilience without Chaos
Chaos engineering is at the stage where disaster recovery was a few years ago in many ways. What typically happened back in the day before disaster recovery became widely accepted by the IT community is that a prolonged data center or server outage typically occurred leading to a catastrophic failure when the disaster recovery system did not function as it should — or even worse — did not even exist.
AutoGPT Agents Want to Automate ChatGPT, Overrun the Internet
Now that the ChatGPT from OpenAI has caught the fancy of the masses, clever AI types have started pondering about how the chatting portion of generative AI service could be automated away, and have the AI just do stuff on your behalf. Their early prototypes are rough, if not potentially dangerous, yet they offer enough promise that some enthusiasts are breathlessly calling them a primitive form of artificial general intelligence (AGI). Welcome to the rapidly emerging world of AutoGPT.
Private SaaS Is Coming: Are You Ready?
Private SaaS Is Coming: Are You Ready? sponsor-cncf,sponsored-post, Private SaaS Is Coming: Are You Ready? With Private SaaS, organizations are uniquely able to meet and exceed complex security requirements, while still enjoying the efficiencies and innovation of SaaS deployments. This post is one of a series of posts previewing KubeCon + CloudNativeCon Europe 2023, April 18-21, Amsterdam.
Advice for Developers Wanting to Become Engineering Managers
Dylan Etkin made a serious mistake in his first month as a new software team manager: He forgot to manage “up.” “I was like, I’m super good at this. My team is doing great and everybody above me knows that I’m pretty good. So I guess they’re going to assume that we’re doing great and in the absence of information they’ll assume we’re doing awesome, right?” said Etkin, now co-founder and CEO of an engineering metrics tracker called Sleuth. “Unfortunately, that’s not how humans work.
Inspect Container Images with the docker scan Command
If you’re serious about container security, then you know it all begins at the beguine…images. No matter how much work you put into locking down your deployments, your network, and your infrastructure, if you base your containers on images with vulnerabilities, those deployments will simply not be secure. And simply trusting that a random image pulled from Docker Hub is enough is a big mistake.
WebAssembly Providers Speed Ahead to Fill Serverless Gaps
It can be safely said that the vast majority of developers and operations team members are not overly concerned about the underlying mechanisms of serverless. In other words, what’s running underneath the hood — as long as it’s safe and secure — is of little interest. It’s the features that count. At the same time, serverless has not lived up to its earlier promise of allowing for the deployment and management of applications with a minimal amount of operations required to support them.
VMware and Other Wasm Players Want WebAssembly
The signs were everywhere: WebAssembly was going to be something big. This was already becoming apparent not long after the World Wide Web Consortium (W3C) named WebAssembly or Wasm as a web standard in 2019 with HTML, CSS and JavaScript (the bread-and-butter language for Wasm thus far). So, while web browser applications have represented Wasm’s central and historical use case, that it is not what Wasm’s potential is about.
Vercel Brings Logging, Monitoring to Its Observability Suite
Frontend platform provider Vercel has updated its observability suite, including new features such as out-of-the-box and custom monitoring and logging. Vercel Chief Technology Officer Malte Ubl sat down with The New Stack to discuss the new monitoring features ahead of the launch. “It’s a straightforward product but a very important one to have because it helps you ensure that your service is stable and you can understand and resolve problems,” Ubl said.
How Knowledge Graphs Make Data More Useful to Organizations
Knowledge graphs have emerged as an essential component underpinning the data science revolution. Machine learning and artificial intelligence (AI) can be used to draw inferences about relations between objects in what initially appears to be a disparate set of data points. In knowledge graphs, these inferences are visualized — with or without AI — and designed so the human mind can easily process them.
National Cybersecurity Strategy Shifts Burden to Tech Sector
Last week the Biden-Harris White House issued a new National Cybersecurity Strategy to protect the country’s critical infrastructure, networks and data from cyber threats. As expected, this comprehensive plan outlines a multiprong strategy to improve the nation’s cybersecurity across public and private sectors. What may not have been expected is that, under this directive, the burden for cybersecurity shifts away from the end users and toward the tech industry.
Bosch IoT and the Importance of Application-Driven Analytics
“Without data, it’s just trial and error.” So says Kai Hackbarth. He’s a senior technology evangelist at Bosch Global Software with over 22 years of industry experience in the Internet of Things. “Be it automotive, be it industrial, be it smart-home, we’ve done it all,” Hackbarth said. Except for tires. That’s his latest focus and technology challenge.
How Decoupling Can Help You Write Better Software
Decoupling is a powerful tool that can help alleviate many issues arising from the ever-growing complexity of modern software. To maintain a high level of performance in such feature-rich applications, you might consider breaking the application up into different services that talk to one another — that is, decoupling your application’s components.
Time Series Analysis on Real-Time Data with Kafka and Kinetica
The growth in popularity of time series data is driven by the increasing availability of sensors and other devices that generate data in real time, as well as the growing recognition of the value in predicting future trends. Time series analysis is a more rigorous and structured approach to understanding patterns than simply charting a measurement over time.
Cloud Native Testing Trends for 2023
As cloud native software development continues to gain traction, the importance of testing following a DevOps workflow has become more pronounced. At KubeCon + CloudNativeCon in Detroit, I had the opportunity to engage with hundreds of DevOps engineers and learn about their latest approaches to testing. With Kubecon 2023 Europe coming up next month, I wanted to share a few trends in testing in the cloud native landscape that I observed from talking with DevOps engineers.
3 Principles for Building Secure Serverless Functions
Feature image via Pixabay Serverless functions, which account for around half of the workloads today at cloud-first companies, have become a popular means of deploying applications largely because serverless minimizes the number of complexities that teams need to think about. By eliminating the need to configure host servers, serverless functions simplify IT operations. That doesn’t mean, however, that serverless functions also simplify security.
Reduce CO2 Emissions and Cost by Increasing Software Efficiency
IT systems are expected to account for as much as 20% of the global energy demand by 2030. To put it in perspective, the transportation industry (jet engines, ships, tankers, trucks, etc.) currently accounts for 25% of the global energy demand. As energy production is the primary source of CO2 emissions, the IT industry must start to act more responsibly. For many industries, moving to more efficient and sustainable options often elicits higher costs or less satisfactory experiences.
Forrester Identifies Best Practices for Serverless Development
Serverless development is rapidly maturing, according to Forrester analyst Devin Dickerson, who researches trends and best practices about the approach. Dickerson is the lead author on a new report on best practices in serverless development and delivery. The New Stack asked Dickerson to explain what developers need to know about a deployment in serverless environments.
Ten Attributes of Serverless Computing Platforms
Serverless Computing or Functions as a Service (FaaS) is gaining momentum. Amazon is fueling the innovation by expanding Lambda to edge devices and content distribution network. IBM, Microsoft, and Google have their own FaaS offerings in the public cloud. There are over half-a-dozen open source serverless projects that are getting the attention of developers. This year, expect to see new platforms emerging in this segment.
Video: Get Started on Pivotal's Cloud Foundry Stack
This is the first, introductory, part of a four part video tutorial on using Pivotal’s Cloud Foundry to build and deploy cloud-native applications. Check back in the next few days for additional segments… The old in-house ways of developing and deploying enterprise software are complicated and slow. They are gradually being replaced by a new set of more automated services, often housed in the cloud. But how does the developer get up to speed on this new stack, if you will?
Drones Muster Out and Head for Wine Country
Bruce Rasa, a Missouri farm owner, is seeing a labor shortage and an increasing average age for farmers. “Increasingly on our farm, as well as our relatives’, to manage a large commercial apple and peach orchard, finding skilled labor can be challenging,” he told The New Stack.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Greg
Contact Greg, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack