Stop Telling Stories

There are beautiful, simple ideas in today’s Agile development methods that work really well. And some that don’t. Like defining…

Read More »

Appsec’s Agile Problem

Agile development has a serious Appsec problem. Most Agile development teams suck at building secure software. But one of the…

Read More »

Applying the 80:20 Rule in Software Development

Managers don’t want to think harder than they have to. They like simple rules of thumb, quick and straightforward ways…

Read More »

Adding Appsec to Agile: Security Stories, Evil User Stories and Abuse(r) Stories

Because Agile development teams work from a backlog of stories, one way to inject application security into software development is…

Read More »

Making Devops work outside of Webops

I’ve spent the last 3 years or so learning more about devops. I went to Velocity and Devopsdays and a…

Read More »

Programming: Thinking or Typing, Thinking and Typing

“If you don’t think carefully, you might think that programming is just typing statements in a programming language.” Ward Cunningham,…

Read More »

Don’t You Know that Support is the Most Important Part of a Developer’s Job?

Agile development – because you are building working software faster and delivering it incrementally – forces development teams to face…

Read More »

Don’t let Somebody Else’s Technical Debt take you Under

There’s a lot written about technical debt: what technical debt is and the different kinds of technical debt, how to…

Read More »

Code Reviews Change Over Time

We’ve been doing code reviews for about 4 years now. Getting Started with Code Reviews From the start, developers would…

Read More »