Backdoors, Sabotage or Just Plain Stupidity

Someone on your development team, or a contractor or a consultant, or one of your sys admins, or a bad…

Read More »

Towards Compliance as Code

Infrastructure as Code is fundamental to DevOps. Automating the work of setting up and maintaining systems infrastructure. Making it defined,…

Read More »

Making Refactoring Work

A recent academic study raises some questions about how useful and how important refactoring really is. The researchers found that…

Read More »

Putting Security into Sprints

To build a secure app, you can’t wait to the end and hope to “test security in”. For teams who…

Read More »

DevOps is not a Race

Most of what we read about or hear about in DevOps emphases speed. Continuous Deployment. Fast feedback. Fail fast, fail…

Read More »

Don’t waste time tracking technical debt

For the last couple of years we’ve been tracking technical debt in our development backlog. Adding debt payments to the…

Read More »

Required Reading: Iron Clad Java

They didn’t teach appsec in Comp Sci or in engineering or MIS or however you learned how to program. And…

Read More »

If you got bugs, you’ll get pwned

The SEI recently published some fascinating research which shows a clear relationship between software quality and software security. The consensus…

Read More »

We can’t measure Programmer Productivity… or can we?

If you go to Google and search for “measuring software developer productivity” you will find a whole lot of nothing.…

Read More »