POPULARITY
Categories
All images and links can be found on CISO Series. Check out this post by Gautam ‘Gotham' Sharma of AccessCyber for the discussion that is the basis of our conversation on this week's episode, co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Steve Zalewski. Joining us is Krista Arndt, associate CISO, St. Luke's University Health Network. In this episode: Verify then trust Dishonesty on all sides A lack of flexibility What about integrity? Huge thanks to our sponsor, Formal Formal secures humans, AI agent's access to MCP servers, infrastructure, and data stores by monitoring and controlling data flows in real time. Using a protocol-aware reverse proxy, Formal enforces least-privilege access to sensitive data and APIs, ensuring AI behavior stays predictable and secure. Visit joinformal.com to learn more or schedule a demo.
SANS Internet Stormcenter Daily Network/Cyber Security and Information Security Stormcast
SSH authorized_keys File One of the most common techniques used by many bots is to add rogue keys to the authorized_keys file, implementing an SSH backdoor. Managing these files and detecting unauthorized changes is not hard and should be done if you operate Unix systems. https://isc.sans.edu/diary/Securing%20Your%20SSH%20authorized_keys%20File/31986 REMOTE COMMAND EXECUTION ON SMARTBEDDED METEOBRIDGE (CVE-2025-4008) Weatherstation software Meteobridge suffers from an easily exploitable unauthenticated remote code execution vulnerability https://www.onekey.com/resource/security-advisory-remote-command-execution-on-smartbedded-meteobridge-cve-2025-4008 https://forum.meteohub.de/viewtopic.php?t=18687 Manageengine ADAuditPlus SQL Injection Zoho patched two SQL Injection vulnerabilities in its ManageEngine ADAuditPlus product https://www.manageengine.com/products/active-directory-audit/cve-2025-41407.html https://www.manageengine.com/products/active-directory-audit/cve-2025-36527.html Dero Miner Infects Containers through Docker API Kaspersky found yet another botnet infecting docker containers to spread crypto coin miners. The initial access happens via exposed docker APIs. https://securelist.com/dero-miner-infects-containers-through-docker-api/116546/
This week we're joined by Nate Moran, Senior Director of Growth, Digital Strategy & Analytics at Edgewell Personal Care—the company behind brands like Schick, Banana Boat, Wet Ones, and more. With a career spanning Red Bull, Newell, Unilever, and now Edgewell, Nate brings a sharp perspective on what it takes to turn data into decisions and insights into impact.In this conversation, Nate and host Dave Feinleib explore the evolving relationship between analytics, creative, performance marketing, and AI. They dig into how Nate and his team think about data strategy, omnichannel planning, and the question on every marketer's mind: where should we spend the next dollar?If you're navigating retail media, e-commerce, or digital growth today, this episode offers a smart, candid look at the challenges—and opportunities—of scaling modern brand performance.Key Takeaways & Episode HighlightsWhy profitability, performance, and category management need to work together in an omnichannel world—and how Edgewell ties these functions across the business.What “the next best dollar” means at Edgewell, and how the team balances incrementality, ROAS, and long-term brand health.Lessons from managing 30,000+ SKUs at Amazon (before APIs made it easy) and how those scrappy skills still apply today.The role of a clear, focused data strategy—and why owning your data is critical for AI readiness and true self-serve analytics.How AI and generative tools like ChatGPT and Snowflake are reshaping workflows, and why agentic AI might be the real unlock for the future.Why creative still matters: performance spend alone won't build trust or brand love—and how to balance emotional storytelling with analytics-driven media.Rapid Rundown QuestionsFavorite Edgewell product: Jack Black Dual Defense SPF MoisturizerBrand that's nailing it creatively: Liquid DeathGo-to tech tools: ChatGPT and SnowflakeFavorite read/listen: The Long and the Short of It by Les Binet and Peter FieldFavorite way to recharge: Mountain biking and snowboarding in Bend, OregonConnect with Nate: https://www.linkedin.com/in/nathanmoran/Get the It'sRapid Creative Automation Playbook: https://itsrapid.ai/creative-workflow-automation-playbook/Take It'sRapid's Creative Workflow Automation with AI survey: https://www.proprofs.com/survey/t/?title=ffgvdEmail us at sales@rapidads.io with code “BEYOND2025” to find out how you can save more than $1,000 on our Digital Sell Sheets and Retail Media Automation solutionsTheme music: "Happy" by Mixaud - https://mixaund.bandcamp.comProducer: Jake Musiker
API security has evolved from being primarily an infrastructure issue to a complex challenge centered around language and design flaws. Jeremy Snyder, CEO of Firetail, discusses the findings from their latest state of API security report, emphasizing the alarming rise of indirect prompt injection as a significant threat in AI-integrated systems. As APIs underpin much of modern application architecture, understanding how they function and the potential vulnerabilities they present is crucial for organizations aiming to protect themselves from increasingly sophisticated attacks.Snyder highlights the shared responsibility model in API security, where both developers and security teams must collaborate to ensure robust protection. While infrastructure teams manage the basic security measures, developers are responsible for the design and logic of the APIs they create. This evolving understanding of security responsibilities is essential as threat actors become more adept at exploiting API vulnerabilities, particularly through authorization failures, which continue to be a leading cause of breaches.The conversation also delves into the distinction between authentication and authorization, illustrating how both are critical to API security. Authentication verifies a user's identity, while authorization determines what actions that user can perform. Snyder emphasizes that many organizations still struggle with authorization issues, which can lead to significant security risks if not properly managed. The report reveals that the time to resolve security incidents remains alarmingly high, while the time for attackers to exploit vulnerabilities has drastically decreased, raising concerns about the effectiveness of current security measures.As AI technologies become more integrated into applications, the potential for indirect prompt injection attacks increases, necessitating a reevaluation of security practices. Snyder advises organizations to focus on secure design principles and maintain visibility over AI usage within their systems. By implementing governance frameworks and monitoring tools, organizations can better manage the risks associated with shadow AI and ensure that their API security measures are both effective and comprehensive. All our Sponsors: https://businessof.tech/sponsors/ Do you want the show on your podcast app or the written versions of the stories? Subscribe to the Business of Tech: https://www.businessof.tech/subscribe/Looking for a link from the stories? The entire script of the show, with links to articles, are posted in each story on https://www.businessof.tech/ Support the show on Patreon: https://patreon.com/mspradio/ Want to be a guest on Business of Tech: Daily 10-Minute IT Services Insights? Send Dave Sobel a message on PodMatch, here: https://www.podmatch.com/hostdetailpreview/businessoftech Want our stuff? Cool Merch? Wear “Why Do We Care?” - Visit https://mspradio.myspreadshop.com Follow us on:LinkedIn: https://www.linkedin.com/company/28908079/YouTube: https://youtube.com/mspradio/Facebook: https://www.facebook.com/mspradionews/Instagram: https://www.instagram.com/mspradio/TikTok: https://www.tiktok.com/@businessoftechBluesky: https://bsky.app/profile/businessof.tech
In this episode of our InfoSecurity Europe 2024 On Location coverage, Marco Ciappelli and Sean Martin sit down with Professor Peter Garraghan, Chair in Computer Science at Lancaster University and co-founder of the AI security startup Mindgard. Peter shares a grounded view of the current AI moment—one where attention-grabbing capabilities often distract from fundamental truths about software security.At the heart of the discussion is the question: Can my AI be hacked? Peter's answer is a firm “yes”—but not for the reasons most might expect. He explains that AI is still software, and the risks it introduces are extensions of those we've seen for decades. The real difference lies not in the nature of the threats, but in how these new interfaces behave and how we, as humans, interact with them. Natural language interfaces, in particular, make it easier to introduce confusion and harder to contain behaviors, especially when people overestimate the intelligence of the systems.Peter highlights that prompt injection, model poisoning, and opaque logic flows are not entirely new challenges. They mirror known classes of vulnerabilities like SQL injection or insecure APIs—only now they come wrapped in the hype of generative AI. He encourages teams to reframe the conversation: replace the word “AI” with “software” and see how the risk profile becomes more recognizable and manageable.A key takeaway is that the issue isn't just technical. Many organizations are integrating AI capabilities without understanding what they're introducing. As Peter puts it, “You're plugging in software filled with features you don't need, which makes your risk modeling much harder.” Guardrails are often mistaken for full protections, and foundational practices in application development and threat modeling are being sidelined by excitement and speed to market.Peter's upcoming session at InfoSecurity Europe—Can My AI Be Hacked?—aims to bring this discussion to life with real-world attack examples, systems-level analysis, and a practical call to action: retool, retrain, and reframe your approach to AI security. Whether you're in development, operations, or governance, this session promises perspective that cuts through the noise and anchors your strategy in reality.___________Guest: Peter Garraghan, Professor in Computer Science at Lancaster University, Fellow of the UK Engineering Physical Sciences and Research Council (EPSRC), and CEO & CTO of Mindgard | https://www.linkedin.com/in/pgarraghan/ Hosts:Sean Martin, Co-Founder at ITSPmagazine | Website: https://www.seanmartin.comMarco Ciappelli, Co-Founder at ITSPmagazine | Website: https://www.marcociappelli.com___________Episode SponsorsThreatLocker: https://itspm.ag/threatlocker-r974___________ResourcesPeter's Session: https://www.infosecurityeurope.com/en-gb/conference-programme/session-details.4355.239479.can-my-ai-be-hacked.htmlLearn more and catch more stories from Infosecurity Europe 2025 London coverage: https://www.itspmagazine.com/infosec25Catch all of our event coverage: https://www.itspmagazine.com/technology-and-cybersecurity-conference-coverageWant to tell your Brand Story Briefing as part of our event coverage? Learn More
New episode with my good friends Sholto Douglas & Trenton Bricken. Sholto focuses on scaling RL and Trenton researches mechanistic interpretability, both at Anthropic.We talk through what's changed in the last year of AI research; the new RL regime and how far it can scale; how to trace a model's thoughts; and how countries, workers, and students should prepare for AGI.See you next year for v3. Here's last year's episode, btw. Enjoy!Watch on YouTube; listen on Apple Podcasts or Spotify.----------SPONSORS* WorkOS ensures that AI companies like OpenAI and Anthropic don't have to spend engineering time building enterprise features like access controls or SSO. It's not that they don't need these features; it's just that WorkOS gives them battle-tested APIs that they can use for auth, provisioning, and more. Start building today at workos.com.* Scale is building the infrastructure for safer, smarter AI. Scale's Data Foundry gives major AI labs access to high-quality data to fuel post-training, while their public leaderboards help assess model capabilities. They also just released Scale Evaluation, a new tool that diagnoses model limitations. If you're an AI researcher or engineer, learn how Scale can help you push the frontier at scale.com/dwarkesh.* Lighthouse is THE fastest immigration solution for the technology industry. They specialize in expert visas like the O-1A and EB-1A, and they've already helped companies like Cursor, Notion, and Replit navigate U.S. immigration. Explore which visa is right for you at lighthousehq.com/ref/Dwarkesh.To sponsor a future episode, visit dwarkesh.com/advertise.----------TIMESTAMPS(00:00:00) – How far can RL scale?(00:16:27) – Is continual learning a key bottleneck?(00:31:59) – Model self-awareness(00:50:32) – Taste and slop(01:00:51) – How soon to fully autonomous agents?(01:15:17) – Neuralese(01:18:55) – Inference compute will bottleneck AGI(01:23:01) – DeepSeek algorithmic improvements(01:37:42) – Why are LLMs ‘baby AGI' but not AlphaZero?(01:45:38) – Mech interp(01:56:15) – How countries should prepare for AGI(02:10:26) – Automating white collar work(02:15:35) – Advice for students Get full access to Dwarkesh Podcast at www.dwarkesh.com/subscribe
There comes a point when the adage "there's an app for that" becomes too on-the-nose.Enterprises need to be able to manage numerous networking and security applications from multiple vendors, but balancing multiple APIs and licenses across those applications creates complexity, Nabil Bukhari, CTO of Extreme Networks, told Light Reading at the company's Extreme Connect event in Paris this week.During this podcast, Bukhari explains the challenges enterprises face in networking and security application management and how the use of AI can simplify network automation and connectivity. But, AI should be used for more than just automating tasks, it should also automate business outcomes, he adds. That could mean "automating the entire process your [networking and security] teams would do anyway" by using AI to troubleshoot problems, remediate issues and catalogue the steps AI took to solve the issue, he says. Hosted on Acast. See acast.com/privacy for more information.
In a wine retail landscape where most businesses are flat or declining, Benchmark Wine Group continues to post steady growth — reaching $45 million in revenue in 2024, up more than 12% from $40 million a year prior. And they're tracking to break that record in 2025! So how are they doing it?! Benchmark is more than a high-end wine shop. Under the leadership of CEO/Owner David Parker, the company has evolved into a multi-pronged wine and spirits ecosystem, with a data and tech backbone that rivals Silicon Valley startups.Benchmark is setting a new standard for what a modern drinks retailer can look like, with operations spanning from BenchmarkWine.com, to Brentwood Auctions, Benchmark Wine & Spirits in Washington, D.C., Wine Spectrum in Napa, and a powerful technology division — First Growth Technologies, which powers Wine Market Journal and Spirits Market Journal.In this episode, David shares:How Benchmark's rare wine focus, data infrastructure, and high-touch customer service helped it thrive while others contractedWhy the company built five complementary businesses and how each arm — from tech to retail to auctions — supports the othersHow First Growth Technologies' data fuels pricing strategy, inventory decisions, and trade relationships in real timeWhy Benchmark's customer base is rapidly diversifying, with 30% of sales now coming from millennial collectors (!!)How the company sources inventory from well-documented private cellars, and what goes into its renowned “provenance guarantee”What's behind the rise in interest for rare spirits, and why Benchmark's D.C. location has become a critical growth engineHow automation, APIs, and AI-driven personalization are shaping the next phase of digital growth — and giving customers better tools to discover and collectWhy David says the company is constantly optimizing for efficiency, trust, and staying power in a complex regulatory and logistical environmentLast Call:This week, we're talking AI, automation, and a radically smarter sales funnel. Alexis Beechen, founder of agave wine brand Ola Sol, is reimagining drinks industry sales using tech tactics that feel more Silicon Valley than traditional beverage. She shares: How AI is helping qualify leads before her sales team walks in the door — with off-the-shelf tools that built a 51% email open rate and 10% meeting conversion. Don't miss our next episode, dropping on May 28.For the latest updates, follow us:Business of Drinks:LinkedInInstagram @bizofdrinksErica Duecy, co-host: Erica Duecy is founder and co-host of Business of Drinks and one of the drinks industry's most accomplished digital and content strategists. She runs the consultancy and advisory arm of Business of Drinks and has built publishing and marketing programs for Drizly, VinePair, SevenFifty, and other hospitality and drinks tech companies.LinkedInInstagram @ericaduecyScott Rosenbaum, co-host: Scott Rosenbaum is co-host of Business of Drinks and a veteran strategist and analyst with deep experience building drinks portfolios. He currently serves as Head of Search at Distill Ventures. He was formerly the Vice President of T. Edward Wines & Spirits, a New York-based importer and distributor.LinkedInCaroline Lamb, contributor: Caroline is a producer and on-air contributor at Business of Drinks and a key account sales and marketing specialist at AHD Vintners, a Michigan-based importer and distributor.LinkedInInstagram @borkalineSPONSOR: SWIG Partners is exclusively offering $100 off their supplier-distributor matchmaking fee when you mention the Business of Drinks podcast, or inquire via this link: https://www.swigpartners.com/businessofdrinksIf you enjoyed today's conversation, follow Business of Drinks wherever you're listening, and don't forget to rate and review us. Your support helps us reach new listeners passionate about the drinks industry. Thank you!
The 16:9 PODCAST IS SPONSORED BY SCREENFEED – DIGITAL SIGNAGE CONTENT Digichief has been helping digital signage and DOOH network operators feed the so-called content beast for a bunch of years. While the Kentucky-based company started up in 2007, its roots go back another decade to a tech start-up that did similar graphics-driven content work for broadcast TV. I've known co-founder Gene Hamm forever, but this podcast was the first time we had a detailed chat about what Digichief does and offers. We get into a bunch of things, including what's widely used and what seems like perfect contextual content, but hasn't caught on. We talk in detail, as well, about more customized content, and about a new service called Mercury that Digichief spent more than a year developing and recently rolled out. If you hear thumping sounds in the background on my end, that's the roofers. It wasn't until the morning we recorded this that I remembered about the racket they'd be making. Big job. Big bill. Subscribe from wherever you pick up new podcasts. TRANSCRIPT Gene Hamm, thank you for joining me. For those people who don't know much about Digichief, could you gimme the elevator pitch on what you guys do? Gene Hamm: Absolutely. Thanks Dave. Long-time listener, first-time caller. Am I the first one to say that? Probably not, among the first. Gene Hamm: My kids always say I've got a lot of dad jokes, so I oh, no, I won't bore with that. But thanks for having me today. I'm Gene Hamm, one of the founders of Digichief. In a nutshell we're a content solutions provider. Basically, a one-source solution for all things content. We work in a number of capacities. We have a white labeled solution for data feeds for those clients who want to control the designs themselves. Or we can provide an integrated solution with HTML5, our widgets for clients that don't want to do the heavy lifting on the design. We already have it baked into our APIs, and so we've built up a library of content over the years. All the staples, weather news, sports info, that sort of thing. We also have some short-form, video series, and some other products that we work as distribution partners, with digital art, things like that. But in a nutshell, we aggregate, we curate, and we create content for you, and we provide it in a consistent manner. We take care of the licensing, and we keep up with the inevitable changes in the source, data feeds, and put it out in a highly scalable, cloud infrastructure. So I would say in the early days or earlier days of digital signage, a lot of companies, I shouldn't say a lot because there weren't many, and there still aren't that many, but the companies that were doing the sort of work that you do, I would describe as aggregators that they were collecting and harmonizing data feeds from news gathering organizations, government organizations like National Weather Service and so on, and getting in a format that's structured, reliable and all those sorts of things so that CMS companies or end users could tap into your feeds and have something that's reliable, organized, and curated to some degree. Is that a fair way of describing things? Gene Hamm: That is a fair assessment, and I think it's evolved over time. I think early on, it was basically, just kind of an aggregation model. We actually started the company, it's an offshoot of another company we'd started back in the 90s where we worked in the broadcast television space, where we were doing lower third tickers, turnkey systems. So kinda like Chiron? Gene Hamm: Yeah, we were third-party developers for Chiron. So we worked a lot with Chiron early on, but a lot of the stuff you saw on the lower thirds and newscasts around the country was our stuff. The dreaded tickers. Gene Hamm: The dreaded tickers that kind of blew up in the 90s, yeah. We did news headlines, we were doing integrations with AP Weather. We actually ended up doing elections, school closings, and internet chat. We were all over the board on that. So that's how we got our feet wet on integrating and aggregating content. In the mid 2000s, we saw the digital signage kind of take off, and we said, look, we've already got these connections with these sources, so why don't we just license these and license this vertical? So that's kind of how it started, but it's evolved over time. We certainly still do that and provide those in a consistent format, but then it's also moved into kind of bespoke projects where people will say, we've got this data, we've got, we want this, maybe we have to go out and do research on specific topics for “Cold weather starting tips for Automotive Dealerships”, things like that. So there's really a research arm to it that we can go out and create stuff for custom projects. So if you had to give a percentage of from a third party versus what you guys are developing internally, what roughly would that be? Gene Hamm: I would say about 60 to 70% of it is aggregating. All the staples, traffic, transit, flight data, news headlines, sports scores, the stuff that people want to display most often. So yeah, I would say roughly 60 to 70% of it, and then the other stuff is, a lot of stuff on the infotainment route is data-based that we've created over time and this could be for like “This day in history” trivia, fun facts, jokes, clean jokes of the day, holidays, whimsical, eye-catching things to get eyeballs up on the screen. The challenge I've always seen with using third-party sources for things like tickers and full-screen presentations, whether it's from the AP, Canadian Press, or Reuters, is that they typically don't write headlines for digital signage or digital at home or anything else, and they don't even really do it in a lot of cases online. So what you end up with are headlines that don't really say anything. It'll say, “This week's top news is this…” and that'll show up on screens. I see it on broadcast still, and I'm going, why are you even using this? Why don't you curate stuff that you know has fully formed thoughts and says in a headline what you need to know versus kind of a teaser? Have you guys struggled with that, or has it gotten better? Gene Hamm: We've absolutely run into that. You're speaking to the choir here. We've knocked our head against the wall so many times, and I just think that for these news organizations, digital signage is an afterthought. Believe me, over the last 20 years, we've seen so many stories come out that we just scratch our heads, and I've had conversations with the editors to try to plead my case, and it just goes on deaf ears. So basically what we have to do with our news, we have two formats. We have one that's filtered, and we've got lookups and intelligence written in where if something comes out misformed or certain key phrases, we just kick them out. And then we have basically a curated version where we actually go in and manually approve and post. We look at the image, we look at the images is another problem with it, but we look at the story, and we say, this doesn't make sense, or maybe we change a few words around to make it flow better and fit into a kind of concise title and description. So yeah, it's been a big problem and honestly it hasn't gotten any better in my viewpoint. Does AI present an opportunity to clean things up? Because I will take the odd story that I write and dump it into Claude and just say, “Give me 10 suggested headlines” and it'll knock out ten headline headlines in 15 seconds, and I'll look at it and go, oh, that one's pretty good and I'll take that one and maybe massage it a little bit. But it does a pretty good job with that sort of thing. Gene Hamm: It absolutely will be a tool that we can utilize, and we're certainly looking into it right now to try to inject on our backend tools that you can request a specific, character-limited title that makes sense. One of the nuances to AI, which I know you're aware of, is that it's all in the phrasing of how you ask the question for the format that you wanted back in. Prompt engineering. Gene Hamm: Yeah. It's an art in itself, and what we see is that we think that AI can help this curation service to look at the headlines that we're getting and spit them out in more of a usable, readable, concise form. But it's not gonna be autonomous anytime soon. Gene Hamm: We'll see. Yeah, not reliably autonomous, it's still gonna give you some weird headlines and all that, but then again, you could hire somebody and they'll give you weird headlines. Gene Hamm: That's true. That's absolutely true. We try to say that our Soft News, which is our curated version, and we try to bill it as G-rated content that's not going to tick somebody off, but that's next to impossible these days because whatever you think is G-rated and is not going to satisfy everyone. We try to stay away from the political end of it, but there's always gonna be somebody that's offended. Yeah. I've talked to a few people who just said, you know what, we don't even do politics on our feeds anymore, or what we show on our screens, because somebody's gonna be irritated, somebody's gonna complain, and it's just not worth it. Gene Hamm: Oh, the stories I can tell. It's funny. We have a custom bad word filter for stuff that we don't want to come across in the AP and so we've built that over time, and I could never let that see the light of day that the things that we've seen come across the wire that we now omit. Even the images as well. There are a lot of times we'll get images that don't really explain the story, it doesn't make sense, maybe they aren't centered on the right focal point of the image, and we think maybe AI could definitely benefit, maybe being able to zone in on what the main cue is of the image that we get with the AP stories or any of the news images. Have the demands and the uses, usage trends evolved through the years, like when I got into digital, more than 25 years ago now, there weren't really even smartphones, and the internet was still fairly new-ish, and you could have public screens in elevators or walkways or shopping malls or whatever that were running news and weather on there, and those would be a primary source for that information, you fast forward to now, and you can't get away from news, you can't get away from weather data, that sort of thing. I've always wondered, do those things need to be on screens anymore? Gene Hamm: That's definitely a good debatable topic. There are so many of these black screens in our hands that fight for attention. We work in the automotive space in dealer showrooms and you walk into the showroom there and people are in the waiting area, and they've got screens up with content on it, news headlines, weather, things like that, and everybody is looking at their phone. So you're always thinking how do we compete with getting eyeballs up on the screen to get the messaging and whatnot for the client, as opposed to the ubiquitous news headlines and things like that. So yeah, it's something that our clients definitely have to deal with. Is that something you coach to, to tell both your resellers and your end users, that it's important to really think through what you're using in terms of content feeds or your content mix so that it's hyper relevant and contextual to where you are versus just “We need stuff to run on this lower third” or “We need stuff to run in between our dealer promotional messages” or whatever it may be, whatever the venue is. Gene Hamm: Absolutely. As you said, it's all in the content mix. If you're trying to get eyeballs up there on the screen, you gotta have relevant hyper-local content, whether that be local traffic maps or local sports scores or things like that for the market. But yeah, the dwell time and how long the content is on the screen, you want to get the eyeballs up there and then move on to what your marketing message is. So it's definitely a delicate balance between, you can't just inundate someone with all the news, all weather. You definitely have to make it in short, concise forms because people's attention spans go elsewhere. They go back to their phone or something else. A few months ago, you announced a partnership with a company called Stream, and I've done a podcast with those folks and laid out what they do and all that. How do you work with them, and could you kinda run down what they do and how that's resonating with your user base? Gene Hamm: Yeah, so we met Anthony Nerantzis at one of the trade shows, and he came by and explained his interest. He's kind of a broadcaster, newsroom journalist. So basically, what it is they do is a presenter-led, concise, short-form video of bespoke custom news, right? And it can be catered to the industry. So if it's medical, financial, or automotive, or what have you. They can go back, write the scripts, and of course, Anthony can describe this company better than I can, so hopefully he's not gonna be mad at me for giving this kind of dissertation. But yeah, I just thought it brought to the table something that we could really customize for our clients, and it's very professional, the workflow is great, you can provide some of the background, what you know the company's looking to do, what type of information they're trying to get across, their team can go back and write a script that's engaging and they can automate the product to put it out on whatever the interval you need, whether it be weekly or monthly. Originally, when they came out, it was a closed caption type thing with lower third supers on the bottom of the screen and I had mentioned to them, “Hey, there are too many graphics on the screen. Maybe, you might wanna streamline that a little bit.” They did that because they're very good about taking feedback, and now they've moved in. It was more of a no-volume type environment product, and now they've, they're able to do audio voiceover as well from the on-air talent actually speaking and you can actually hear it. Now they're getting into kind of the marketing communication end of it where, let's say it's a pharmaceutical company or something that wants to talk about things that like the president or the CEO wants to talk about certain things to their employees that they have going on, his team's able to go out and produce that and deliver that information and they can get eyeballs up on the screen, educate and inform the client. It's been very well received and we're also looking to work with them on some of our feeds, whether it's health-related type content, maybe we can work in some of the real, day-to-day, hyper-local information on the tail end of the video segment. Say if it's a medical facility and they're talking about medical health tips, things like that, maybe it comes in and we can integrate with one of our APIs and follow the levels of the flu levels there are for the specific area, so we can really hyper-localize it. So in a lot of respects, it's a variation on the sort of work that you've been doing, particularly on the custom side of it. But instead of it just being text and visuals, they can do a full video with on-air talent and they do that by green screening, on-air hosts, and then mashing that up with AI so that it's a human talking to you and doing a custom presentation as opposed to an anime avatar look that I think looks ghastly in most cases? Gene Hamm: Absolutely. I think going to the presenter-led approach is advantageous and some of the early ones, like you said, that we've seen are just creepy. But I think what they're doing with their technology is amazing. I think it looks spot on. Yeah, I've looked at it a couple of times for extended periods, just paying attention to see if it's glitchy at all, and it's very smooth, and if you didn't know, you'd be hard pressed to know, this is AI-generated, but it's absolutely human. But the movements and lips and all that stuff are being massaged through AI. Gene Hamm: Yeah, and the neat thing about it, too, is just it's so scalable and they can automate it, and they can really like its bespoke content, so they can create the script, have it produce it in very short order. So more recently, you've announced something else called Mercury. Can you walk through what that is? Gene Hamm: Mercury was created basically to give our users a more robust way to onboard our HTML content. We were getting requests for more of a web portal that gives more granular design choices such as colors, backgrounds, logos, the transitions. They can go in and micromanage the news they wanna see, or the sports they want to see, the duration that it's on the screen, and then, they can compile that into a playlist and then output it to a URL and that URL can be scheduled. It's quite a long time coming. We certainly had HTML55 widgets before, but this just gives people a little bit more granular decisions and a web portal, and then we also thought it was a good way to showcase our widget library. We built up these designs over time. Many of the products that we have, there's multiple designs, and so for, we think it might be a growth area for new prospects, that it lowers the barrier of entry to go out and actually, sign up for a free trial, take a look at, it's an all you can eat type model where we've got all the staples, the news, the weather, the sports, the stocks, the infotainment and we're adding new designs and widgets all the time. I think it's intuitive where we spent well over a year designing the system, and I think it really gives people a way to sample our products and see how it works with their systems. Could you give an example of how a typical client would use it and what they do? Gene Hamm: Yeah, so they sign up for the product. It's a subscription service, with volume discounts that they can go in, and we've got a kind of smorgasbord of content, a widget library and it's all categorized by, like I said, news, weather, things like that, and they can pick and choose what content they wanna build into a playlist? Now that could be just a single piece of content, whether, say, weather, and they've got a bunch of different designs, whether they wanna do a 5K five-day forecast, if they wanna do a full-screen weather map, they can choose their locations, and then they can output it as a URL that URL can be a plugged into a playlist and that pluglist can have their content or they can massage their own local content, through their own platform, so it just gives them the ability to do this kind of infotainment type stuff in between their other messaging. But yeah, they can build a playlist with a single asset, or they can build a playlist with 30 and build a longer duration, say, a 20-minute loop if they want. So yeah, that's the typical workflow. So more normally or in the past, if I were a corporate entity and I had a corporate campus in three cities in South Carolina. If I were buying that from a typical subscription content service or weather provider, it's going to have a certain look and color schemes, everything else, and you can't really deviate from that, versus with Mercury, you can choose your fonts, choose your background, colors, everything else, and tweak it so it fits the way you want, maybe has the company's corporate colors and or just fits in with the overall look of the network. Is that a clear way of saying this? Gene Hamm: Yeah. To make it very granular, the layout of, let's say, a five-day forecast, the data itself is set on the screen, but all the other elements around it like if they wanted to upload their own. company logo, if they wanna match their corporate colors, they can choose certain fonts that may match what you know they're using. So yeah, they can make different transitions to it, so they can really make granular choices with it to fall in line with what they're looking for, but be on the same thing across the same board. We have stocks, if they wanna put their own company stock up there, they can do that. If they wanna do infotainment like trivia or whatnot, we have a number of different trivia categories that they can choose. So yeah, they can really hyper-localize. Do you put guardrails in terms of design choices that can be made? Like thinking particularly of font choices and Lord knows we've all seen online, particularly, and less so on digital signage, here somebody decides I'm going to use this font, and it's just the wrong choice. Gene Hamm: We have chosen a list of fonts that we have in a dropdown box that they can choose from. As you can imagine, this was our initial decision when we debuted this release system a few months ago, and our thought is that we wanna give them these options to an extent, right? So we have several fonts that we think we deem look good, and we certainly can add additional fonts as we go. But yes, I agree there's some god awful fonts up there that we don't think would at the end of the day look great on particular design. Is this the way to deal with the demand that can scale up so that if you were just doing this through managed services, where you would have companies come to you and say, “Hey, we would like a live custom feed that presents ou weather and other information in these fonts, this background and everything else.” That's hard to do and hard to charge because if it's a one-off, you gotta charge a lot more for it, versus a service where you log in and you do it yourself, by and large, that makes it possible to do more. Gene Hamm: Yeah, I think so. I think with the pricing model, how we have it, they can use everything. It's all you can eat, in terms of all these different designs and content categories that they can go in and it's not gonna cost them anymore if they put the news or the weather up there. I think the value proposition to Mercury is that we're doing the heavy lifting on the backend, and that these local networks don't have to go out and find different sources, and like you mentioned, the National Weather Service. Early on, we were integrating with the National Weather Service and that got to be just an overwhelming task because of stages and formats, and changes in the designs and things like that. It just made more sense for us to go out and get an aggregated list. Actually, we have a couple of different aggregated services. So, like a lot of our staples, we have a primary source and a backup source. So if one goes inevitably, these sources have issues, and if one goes down. It really streamlines the whole process. Has the whole business of getting data from different sources improved? Have they started to, or maybe not started, but long since understood that you can't keep changing the structure. You've gotta stick to something. Gene Hamm: Yes and no. With sports specifically, they're good about giving us a heads up when things are gonna change. In the olden days, we would find out about it after it happened. So I think a lot of the source APIs that we have do a good job of giving us kind of a change. But there's repercussions. If they do a full change of their structure, we have to integrate that, and if it has any changes to how we do content, we have to let our clients know, and we have to make sure the widgets are changed. We have to make sure they know that the structure's changed. During the pandemic, we really moved our cloud infrastructure from one cloud service to another. We added a lot of data points to our structure, and so that was really an uphill battle in terms of having to communicate to our current client base that had already done the design work and had already integrated with our APIs to let them know that's coming. So we don't take these things lightly and we've communicated to our sources over time about the repercussions to this. You can't just pull the trigger and give us a two-week notice. What about social media? If I go back 10-15 years, there were a lot of subscription content providers and CMS companies developing widgets so that you could display Twitter (now X) or Facebook post or whatever maybe on screens and I think over time people realize, oh boy, that's a dangerous thing to do unless you've got somebody sitting right on top of it all the time. Gene Hamm: It's absolutely the case. In fact, we were one of the ones early on that were doing native integrations with the APIs from Twitter and Facebook and whatnot, and it got to be a full-time job for our developers, changing not only the licensing, but the structure, and we finally threw in the towel on it and outsourced it to a company where that's all they do, and so we work with this particular company, and they take care of it. They've got a team of developers that don't do anything else, and they keep up on all the backend changes, the licensing, and so we're able to not only provide Facebook, Instagram, Twitter or X, LinkedIn, all this as a concise data feed with different data points and assets, and then we also have an HTML version that integrates with it. So yeah, we've definitely gone the route of outsourcing that to someone who could keep up with it. Is there a most popular resource and one that you thought would have traction and that just never worked out, and you've since dropped or rarely see sold? Gene Hamm: About a year ago, we started with a health API, so seasonal and patient level data, and by seasonal, we mean pollen which is a big one and we have multiple sources for that. But, RSV levels, COVID-19 numbers, cold and cough, and flu. And then we can even get granular with patients. We can go and say a zip code in the United States, and say, what are the ten highest levels of obesity? And they can customize a message or an ad campaign towards that. Those particular zip codes we thought would take off at least the patient-level stuff and it was just really slow out of the gate. We've had a lot of interest and we've made a lot of presentations, but I think there are a lot of these companies that are still trying to figure out how they might use it. Flight data is one that we work with, and we have some clients using it. There are certain sources that are very expensive to keep up with. That's something that we thought would be selling more than it does. A lot of times, the people that you know that put the flight data up are probably going directly to the source as opposed to going through somebody like us. Is there one that everybody uses, or almost everybody? Gene Hamm: Everybody uses weather, of course, that's the big one. Everybody uses sports scores, and everybody uses news. That's news, weather, sports are the big dogs. Just a couple of final questions. Where are you guys based, and how big is your company? I'm thinking you don't have that big of a headcount because you don't need to, because you're using external resources. Gene Hamm: Yeah, so we're based in Lexington, Kentucky. We also have partners spread across the world. But I got a partner in California. There are a few of us here, and then we've got a couple in Ukraine. So we've been working with a couple of developers who are now employees in Ukraine, well before the war. So it's been interesting seeing that side of it from an employee. It gives you a perspective on a drone flying over, and bombings and things like that. So there are five of us. We run a small operation, but like you said, we don't really need an extensive team. We certainly have worked with or contracted out some design work in terms of the graphical design. We've worked with the same designers for well over a decade. All right, so thank you. If people wanna find out more, it's just Digichief.com, right? Gene Hamm: Yeah, Digichief.com, and then if someone wants to sample Mercury for a free trial, there's a Mercury link on there that they can go and sign up for, and give it a whirl. Gene, thank you. Gene Hamm: Thank you, Dave. I appreciate your time.
In this episode of Maintainable, Robby speaks with Joe Masilotti, an independent consultant who helps Rails teams ship mobile apps using Hotwire Native.Joe shares his perspective on what makes software maintainable—especially for consultants who need to onboard quickly. He explains why setup scripts often add unnecessary complexity, and how he evaluates a project's maintainability by how quickly he can go from clone to coding.Robby and Joe also discuss how hybrid mobile development can offer faster delivery, fewer bugs, and better long-term flexibility—especially when teams reuse their existing Rails web views. Joe explains how Hotwire Native allows teams to incrementally introduce native features without rewriting their entire app.Whether you're maintaining a mobile shell built two years ago or just starting to explore native development, Joe offers actionable advice on setting expectations, scoping client work, and navigating modern mobile tech stacks.⏱️ Episode Highlights[00:01:17] Onboarding as a Measure of MaintainabilityJoe shares how quickly he can spin up a Rails app often reflects how maintainable it is.[00:05:12] Being a Good Guest in Someone Else's CodebaseJoe outlines his ideal onboarding checklist and how he adapts to unfamiliar environments.[00:08:00] Setting Communication and Collaboration ExpectationsThe three questions Joe asks every client to understand how their team works.[00:13:02] Offering Opinions—Only Where InvitedWhy Joe stays scoped to the work he's hired for, even when tempted to fix more.[00:14:15] When Technical Debt Enters the ConversationJoe explains how debt discussions usually emerge after version one is shipped.[00:15:33] Who Should Read Hotwire Native for Rails DevelopersJoe describes the type of developer his book is written for and what it covers.[00:18:01] Choosing Native vs. Hybrid for Your Rails AppA framework comparison based on your current frontend architecture.[00:20:00] Introducing the Hotwire Native MindsetWhy logic belongs on the server and the client should stay thin.[00:21:00] Bridge Components: How Rails, iOS, and Android ConnectJoe walks through how native and web technologies pass data between layers.[00:24:00] Why Even a Web View-Based App is Worth ShippingThe practical benefits of discoverability, push notifications, and native APIs.[00:28:01] Replacing Unmaintainable Apps with Hotwire NativeJoe describes how hybrid rewrites often reduce mobile code by 90%.[00:31:33] Letting Go of Feature ParityWhy most clients end up cutting features they originally wanted to preserve.[00:32:18] Scoping and Estimating Project-Based WorkHow Joe uses repeatable patterns to price fixed-fee consulting engagements.[00:35:15] Using AI to Translate Between Tech StacksJoe shares how he leverages LLMs to explore unfamiliar languages like Kotlin.[00:42:26] Long-Term Maintainability and When to Touch the CodeWhy some apps don't need changes for years—and that's okay.[00:43:43] Why Hybrid Apps Are Easier to ReplaceJoe explains why hybrid apps are often more disposable and less risky than monolithic web apps.
KeywordsBitcoin, open source, decentralization, mining, APIs, UTX Oracle, firmware, Bitcoin price, self-sovereignty, hardwareSummaryThis conversation delves into the significance of open source in Bitcoin mining, emphasizing its role in decentralization and innovation. The speakers discuss various open source projects aimed at improving mining efficiency, the challenges posed by current mining firmware, and the potential of the UTX Oracle in providing a crowdsourced Bitcoin price. They also explore the future of open source in Bitcoin mining hardware, highlighting the need for greater control and transparency in the mining process.TakeawaysBitcoin is a combination of many innovative ideas.Open source is crucial for the decentralization of Bitcoin.Bitcoin mining must also be open source to remain decentralized.PyASIC simplifies monitoring for Bitcoin miners.The UTX Oracle offers a more reliable Bitcoin price.Current mining firmware is poorly designed and limits control.Greater control over mining operations can enhance profitability.Crowdsourcing Bitcoin price through UTX Oracle is revolutionary.Self-sovereignty in Bitcoin mining is essential.Open source hardware faces significant challenges but is possible.Chapters00:00 Decentralizing Bitcoin Mining: An Introduction01:50 The Importance of Open Source in Bitcoin04:55 Innovative Tools for Bitcoin Miners08:06 Challenges with Current Mining Firmware10:52 Curtailment and Control in Mining Operations13:49 The Role of UTX Oracle in Bitcoin Pricing16:44 Crowdsourcing Bitcoin Price Data20:06 The Future of Open Source Hardware in Bitcoin Mining22:56 Community Engagement and Open Source Contributions
Meet Jared Siebert, Owner and Developer of Vintools, a company revolutionizing winery eCommerce through smart integrations and streamlined marketing solutions. Jared combines deep web development expertise with a passion for solving real-world challenges in the wine industry. Here's a glimpse of what you'll learn: Learn about Vintools' offerings and their expertise with Commerce7 and WineDirect Explore the journey from customizable website templates to API-driven email marketing solutions Explore practical tips for integrating tools into winery campaigns Discover how Vintools' referral engine boosts customer referrals and amplifies word-of-mouth sales Understand the role of client feedback in driving new integrations Get a peek into how AI tools are shaping code development In this episode with Jared Siebert Join us for a deep dive into the intersection of wine, tech, and marketing. In today's episode of Legends Behind the Craft, Drew Thomas Hendricks chats with Jared Siebert, the founder of Vintools, about how modern APIs, integrations, and thoughtful design are helping wineries grow their online presence with less friction. Whether you're a tech-savvy winery or just starting your digital journey, this episode uncorks the tools and strategies that are reshaping how wine brands connect with customers. Sponsor for this episode… This episode is brought to you by Barrels Ahead. Barrels Ahead is a wine and craft marketing agency that propels organic growth by using a powerful combination of content development, Search Engine Optimization, and paid search. At Barrels Ahead, we know that your business is unique. That's why we work with you to create a one-of-a-kind marketing strategy that highlights your authenticity, tells your story, and makes your business stand out from your competitors. Our team at Barrels Ahead helps you leverage your knowledge so you can enjoy the results and revenue your business deserves. So, what are you waiting for? Unlock your results today! To learn more, visit barrelsahead.com or email us at hello@barrelsahead.com to schedule a strategy call.
In a world where anyone can list a website for sale, Empire Flippers accepts only 5% of submissions. Why?Because their marketplace has become the gold standard for serious buyers.Every listing undergoes rigorous verification through APIs, financial checks, and seller background screening.In this interview, CEO Andy Allaway shares what's really happening in today's market.And what separates million-dollar website listings from the rest, including a rare look at a 20-year-old news site generating $60K monthly that passed their strict vetting process.Plus, Andy answers the big question: Is it still worth buying or selling online businesses in 2025?Whether you're looking to buy your first website or sell your 7-figure e-com brand, this interview is packed with value.Listen now to get the inside scoop on what's really happening in the online business marketplace in 2025.Connect with Andy on LinkedIn: https://www.linkedin.com/in/andyallaway/Want To Learn How To Buy Websites for Income and Financial Independence?You don't need tech skills or prior experience—just the right strategy. Learn how complete beginners are buying profitable online businesses (without the risk of getting scammed or overpaying): https://www.ebusinessinstitute.com.au/dip
本期节目我们和《二分电台》的主播 2BAB 探讨了移动应用开发领域的技术趋势。AB 详细介绍了原生与非原生开发的区别,以及 Flutter、ReactNative 和 Kotlin Multiplatform (KMP) 等跨平台框架的特点。嘉宾们还分析了各种技术选型的优劣,例如 ReactNative 的热更新优势和 Flutter 的 UI 一致性,以及 Kotlin 作为 Android 官方语言的崛起。最后,节目还探讨了 On-Device 模型在移动设备上的应用前景,例如图像语义搜索和离线推理,并对 AI 技术在移动开发领域的潜在影响进行了展望。 嘉宾 2BAB (AB) 主播 laike9m Manjusaka 章节 00:14 移动端开发框架介绍与原生/非原生定义 07:03 ReactNative 的兴起、问题与 Flutter 的挑战 14:19 Kotlin Multiplatform (KMP) 与 Jetpack Compose 的发展 23:22 KMP 的流行度、ReactNative 的价值与未来发展 30:05 Electron 的妥协与热更新的重要性 37:43 入门移动端开发的建议与 Flutter 的未来 42:57 Flutter 的风险与 Kotlin 的竞争 48:45 On-Device Model 的应用与发展 55:10 On-Device Model 的功耗与应用场景 1:03:08 On-Device Model 的隐私与安全 1:10:03 总结与推荐 链接 React Native Flutter Kotlin Programming Language Jetpack Compose Kotlin Multiplatform (KMP) Compose Multiplatform (CMP) SkiaSkia is an open source 2D graphics library which provides common APIs that work across a variety of hardware and software platforms. It serves as the graphics engine for Google Chrome and ChromeOS, Android, Flutter, and many other products. The Truth About React Native - YouTube google/XNNPACK: High-efficiency floating-point neural network inference operators for mobile, server, and Web React Native Panel hosted by Jamon Holmgren - Chiara Mooney, Eli White, Keith Kurak, Chris Traganos - YouTube Gemini Nano litert-community/Gemma3-1B-IT · Hugging Face OpenAIDoc | 开发者友好的文档中心,一站式解决您的技术文档需求 《mono 女孩》
Is REST alive and well? Or is it time to move on?Kin Lane (aka the “API Evangelist”) joins this episode of Gartner's Steering Engineering Podcast to explore these topics and answer the question: What does “good” actually mean when it comes to APIs?About the GuestKin Lane describes himself as an “API Evangelist,” with a long history of building and consulting on APIs and API strategy.
This interview was recorded for the GOTO Book Club.gotopia.tech/bookclubRead the full transcription of the interview hereStephen Fishman - Field CTO at Boomi & Co-Author of "Unbundling the Enterprise"Matt McLarty - CTO at Boomi & Co-Author of "Unbundling the Enterprise"Erik Wilde - Principal Consultant at INNOQRESOURCESStephenhttps://x.com/fistsOfReasonhttps://www.linkedin.com/in/stephenhfishmanhttps://github.com/StephenFishmanMatthttps://bsky.app/profile/mattmclartybc.bsky.socialhttps://x.com/MattMcLartyBChttps://www.linkedin.com/in/mattmclartybcErikhttps://www.linkedin.com/in/erikwildehttps://github.com/dretLinkshttps://itrevolution.com/articleshttps://www.hbs.edu/faculty/PagesDESCRIPTIONHow can businesses thrive by embracing optionality through digital transformation?Authors Matt McLarty and Stephen Fishman talk about their book “Unbundling the Enterprise” with Erik Wilde. They highlight the power of APIs and flexible systems in enabling companies to capitalize on unforeseen opportunities, or "happy accidents," and how low-cost experimentation can drive long-term success.The conversation emphasizes that optionality is crucial not only in tech but also in business strategy, urging organizations to view their digital capabilities as part of a broader platform that supports both developer empowerment and revenue growth. With insights on optimization, platform engineering, and the importance of aligning technology with business objectives, the authors offer a roadmap for companies to navigate the future with agility and resilience.RECOMMENDED BOOKSStephen Fishman & Matt McLarty • Unbundling the EnterpriseCarliss Y. Baldwin • Design Rules, Vol. 2Matthew Skelton & Manuel Pais • Team TopologiesForsgren, Humble & Kim • Accelerate: The Science of Lean Software and DevOpsKim, Humble, Debois, Willis & Forsgren • The DevOps HandbookMik Kersten • Project to ProductAndrew Harmel-Law • Facilitating Software ArchitectureBlueskyTwitterInstagramLinkedInFacebookCHANNEL MEMBERSHIP BONUSJoin this channel to get early access to videos & other perks:https://www.youtube.com/channel/UCs_tLP3AiwYKwdUHpltJPuA/joinLooking for a unique learning experience?Attend the next GOTO conference near you! Get your ticket: gotopia.techSUBSCRIBE TO OUR YOUTUBE CHANNEL - new videos posted daily!
In this episode, we're bringing you a curated selection of conversations from the KubeCon EU 2025 showfloor. We'll be diving into the rise of platform engineering, exploring some cutting-edge technologies, getting updates on core Kubernetes components, and hearing some truly unique user stories, like using Kubernetes on a dairy farm! Do you have something cool to share? Some questions? Let us know: - web: kubernetespodcast.com - mail: kubernetespodcast@google.com - twitter: @kubernetespod - bluesky: @kubernetespodcast.com News of the week CNCF Blog - Announcing the Automated Governance Maturity Model Kubernetes Blog CNCF Blog - Understanding Kubernetes Gateway API: A Modern Approach to Traffic Management Open Observability Summit Links from the interview NAIS at NAV, with Hans Kristian Flaatten and Audun Fauchald Strand Audun Fauchald Strand Hans Kristian Flaatten NAV (Norwegian Labor and Welfare Administration) Kubernetes Podcast 216: NAIS, with Johnny Horvi and Frode Sundby NAIS KubeCon EU 2025 Keynote: Adventures of Building a Platform as a Service for the Government - Hans Kristian Flaatten, Lead Platform Engineer, NAV & Audun Fauchald Strand, Principal Software Engineer, NAV GKE release notes Platform Engineering, with Max Körbächer and Andreas (Andi) Grabner Max Körbächer Andreas (Andi) Grabner Book: “Platform Engineering for Architects: Crafting modern platforms as a product” by Max Körbächer, Andreas Grabner, and Hilliary Lipsig Cloud Native Summit Munich Kubernetes at LinkedIn, with Ahmet Alp Balkan and Ronak Nathani Ahmet Alp Balkan Ronak Nathani Kubernetes Podcast 249: Kubernetes at LinkedIn, with Ahmet Alp Balkan and Ronak Nathani Ahmet's Blog Introducing Multi-Cluster Orchestrator: Scale your Kubernetes workloads across regions LLMs on Kubernetes, with Mofi and Abdel KubeCon EU 2025 talk: Yes You Can Run LLMs on Kubernetes - Abdel Sghiouar & Mofi Rahman, Google Cloud About the Gateway API Gateway API Inference Extension Deploy GKE Inference Gateway SIG etcd with Ivan Valdes Ivan Valdes etcd.io SIG etcd on GitHub Open Source Kubernetes, with Jago Macleod Jago Macleod Google Open Source: Kubernetes Schedmd Slurm Ray Run:ai from Nvidia Medium blog: “Deploy Slurm on GKE” by Abdel Sghiouar AI-Hypercomputer, xpk XPK (Accelerated Processing Kit, pronounced x-p-k) is a command line interface that simplifies cluster creation and workload execution on Google Kubernetes Engine (GKE). XPK generates preconfigured, training-optimized clusters and allows easy workload scheduling without any Kubernetes expertise. Cursor AI Editor Dairy Farm Automation & Banking with Kubernetes, with Clément Nussbaumer Clément Nussbaumer Talos Linux Cluster-api Cluster API is a Kubernetes subproject focused on providing declarative APIs and tooling to simplify provisioning, upgrading, and operating multiple Kubernetes clusters. KubeCon EU 2025 Talk: “Day-2'000 - Migration From Kubeadm+Ansible To ClusterAPI+Talos: A Swiss Bank's Journey” - Clément Nussbaumer, PostFinance Kubeadm Kubeadm is a tool built to provide kubeadm init and kubeadm join as best-practice "fast paths" for creating Kubernetes clusters. Being a First-Time KubeCon Attendee, with Nick Taylor Kubernetes The Hard Way K3s - “The certified Kubernetes distribution built for IoT & Edge computing” Kubernetes Ingress Controllers Kubernetes Up and Running Kubernetes Docs KubeCon EU 2025 Sponsored Keynote: The Science of Winning: Oracle Red Bull Racing's Formula with Open Source, Kubernetes and AI - Sudha Raghavan, SVP of OCI Developer Platform, Oracle
In this episode, we dive into the bold moves reshaping the travel industry. Airbnb relaunches Experiences and debuts Services with a mission to create more human connection—think chefs, massages, and personal trainers on demand. Meanwhile, Expedia doubles down on B2B and AI, launching powerful new APIs and an intelligent travel agent to streamline discovery and booking. From emotional connection to seamless automation, we explore how two giants are redefining what it means to travel in 2025.Are you new and want to start your own hospitality business?Join our Facebook groupFollow Boostly and join the discussion:YouTube LinkedInFacebookWant to know more about us? Visit our websiteStay informed and ahead of the curve with the latest insights and analysis.
Esther Tech President, April Taylor, details the mounting pressure telecom providers face to streamline operations and cut costs. Now, AI, APIs, and blockchain are transforming intercarrier transactions, eliminating manual processes, reducing disputes, and enabling on-demand services. By how much can automation really accelerate payment? In this Executives at the Edge episode, host Pascal Menezes explores... Read More The post AI, APIs, and Blockchain: Accelerating Quote to Cash appeared first on MEF.
In the second episode of our special series on recommendations to the Trump administration, Quality Matters host Andy Reynolds welcomes Ryan Howells, Principal at Leavitt Partners, for an illuminating discussion on transforming digital quality and data exchange..Ryan shares fresh ideas from the Leavitt Partners roadmap to reshape digital health infrastructure by embracing scalable, internet-based standards and dismantling policy barriers. At the core of this conversation is that effective data exchange must be powered not only by modern standards, but by trust among people and institutions. Ryan's suggestions include:· Implementing APIs at scale to reduce manual processes and administrative waste. The same APIs that power everyday apps can streamline data exchange between payers and providers, replacing faxes, phone calls and redundant forms.· Certifying data exchange—not just software functionality. Instead of dictating how systems are built, federal policy should focus on certifying APIs, allowing EHR vendors the flexibility to innovate while helping ensure that data flows freely.· Establishing “tables of trust.” Regional collaboration among payers, providers and government agencies can test new digital infrastructure in real-world settings and be the model for national expansion.Digital quality transformation will require more than just tech upgrades—we must rethink relationships, trust and policy levers. Listen to this episode to learn how the Trump administration could support a data-driven revolution in health care quality.Key Quote:“I've been doing this for a long time, almost 30 years. But when I go into my doctor's office and I still have to fill out a clipboard with a piece of paper on it with information I know they already have, it is painful. The best representation of whether we are making progress is, I don't want to ever go into a doctor's office and fill out a clipboard. If I could just not fill out my health history, my demographic information, whether information should be sent to my doctor—if all that is just in the doctor's system—I would say we have made progress. Because at that point it will be real to the individual. Think about it in terms of digitizing all of the health care data and making sure it is with the right person, at the right time, in the right place to make the right decisions. When that happens, we'll know we've made significant progress.” Ryan Howells Time Stamps:(02:27) Why Implementing Health Care APIs is Hard(05:32) Tables of Trust: A Case Study from Utah(07:03) Scaling Trust and Interoperability(13:12) Eliminating Manual Processes (18:23) Solving Diverse Use Cases (19:36) Encouraging Early Adoption of APIsLinks:NCQA Recommendations to the Trump Administration Leavitt Partners Recommendations: “Kill the Clipboard!”Connect with Ryan Howells
The Model Context Protocol, or MCP, is a new open standard that connects AI assistants to arbitrary data sources and tools, such as codebases, APIs, and content repositories. Instead of building bespoke integrations for each system, developers can use MCP to establish secure, scalable connections between AI models and the data they need. By standardizing The post Anthropic and the Model Context Protocol with David Soria Parra appeared first on Software Engineering Daily.
Episode SummaryJeremy Snyder is the co-founder and CEO of FireTail, a company that enables organizations to adopt AI safely without sacrificing speed or innovation. In this conversation, Jeremy shares his deep expertise in API and AI security, highlighting the second wave of cloud adoption and his pivotal experiences at AWS during key moments in its growth from startup onwards.Show NotesIn this episode of The Secure Developer, host Danny Allan sits down with Jeremy Snyder, the Co-founder and CEO of FireTail, to unravel the complexities of API security and explore its critical intersection with the burgeoning field of Artificial Intelligence. Jeremy brings a wealth of experience, tracing his journey from early days in computational linguistics and IT infrastructure, through a pivotal period at AWS during its startup phase, to eventually co-founding FireTail to address the escalating challenges in API security driven by modern, decoupled software architectures.The conversation dives deep into the common pitfalls and crucial best practices for securing APIs. Jeremy clearly distinguishes between authentication (verifying identity) and authorization (defining permissions), emphasizing that failures in authorization are a leading cause of API-related data breaches. He sheds light on vulnerabilities like Broken Object-Level Authorization (BOLA), explaining how seemingly innocuous practices like using sequential integer IDs can expose entire datasets if server-side checks are missed. The discussion also touches on the discoverability of backend APIs and the persistent challenges surrounding multi-factor authentication, including the human element in security weaknesses like SIM swapping.Looking at current trends, Jeremy shares insights from FireTail's ongoing research, including their annual "State of API Security" report, which has uncovered novel attack vectors such as attempts to deploy malware via API calls. A significant portion of the discussion focuses on the new frontier of AI security, where APIs serve as the primary conduit for interaction—and potential exploitation. Jeremy details how AI systems and LLM integrations introduce new risks, citing a real-world example of how a vulnerability in an AI's web crawler API could be leveraged for DDoS attacks. He speculates on the future evolution of APIs, suggesting that technologies like GraphQL might become more prevalent to accommodate the non-deterministic and data-hungry nature of AI agents. Despite the evolving threats, Jeremy concludes with an optimistic view, noting that the gap between business adoption of new technologies and security teams' responses is encouragingly shrinking, leading to more proactive and integrated security practices.LinksFireTailRapid7Snyk - The Developer Security Company Follow UsOur WebsiteOur LinkedIn
The Model Context Protocol, or MCP, is a new open standard that connects AI assistants to arbitrary data sources and tools, such as codebases, APIs, and content repositories. Instead of building bespoke integrations for each system, developers can use MCP to establish secure, scalable connections between AI models and the data they need. By standardizing The post Anthropic and the Model Context Protocol with David Soria Parra appeared first on Software Engineering Daily.
In this episode, Lois Houston and Nikita Abraham, along with Nick Wagner, focus on GoldenGate's terminology and architectural evolution. Nick defines source and target systems, which are crucial for data replication, and then moves on to explain the data extraction and replication processes. He also talks about the new microservices architecture, which replaces the classic architecture, offering benefits like simplified management, enhanced security, and a user-friendly interface. Nick highlights how this architecture facilitates easy upgrades and provides a streamlined experience for administrators. Oracle GoldenGate 23ai: Fundamentals: https://mylearn.oracle.com/ou/course/oracle-goldengate-23ai-fundamentals/145884/237273 Oracle University Learning Community: https://education.oracle.com/ou-community LinkedIn: https://www.linkedin.com/showcase/oracle-university/ X: https://x.com/Oracle_Edu Special thanks to Arijit Ghosh, David Wright, Kris-Ann Nansen, Radhika Banka, and the OU Studio Team for helping us create this episode. --------------------------------------------------------------- Episode Transcript: 00:00 Welcome to the Oracle University Podcast, the first stop on your cloud journey. During this series of informative podcasts, we'll bring you foundational training on the most popular Oracle technologies. Let's get started! 00:25 Nikita: Welcome to the Oracle University Podcast! I'm Nikita Abraham, Team Lead of Editorial Services with Oracle University, and with me is Lois Houston: Director of Innovation Programs. Lois: Hi there! Thanks for joining us again as we make our way through Oracle GoldenGate 23ai. Last week, we discussed all the new features introduced in 23ai and today, we'll move on to the terminology, the different processes and what they do, and the architecture of the product at a high level. 00:56 Nikita: Back with us is Nick Wagner, Senior Director of Product Management for Oracle GoldenGate. Hi Nick! Let's get into some of the terminology. What do we actually call stuff in GoldenGate? Nick: Within GoldenGate, we have our source systems and our target systems. The source is where we're going to be capturing data from, the targets, where we're going to be applying data into. And when we start talking about things like active-active or setting up GoldenGate for high availability, where your source can also be your target, it does become a little bit more complex. And so in some of those cases, we might refer to things as East and West, or America and Europe, or different versions of that. We also have a couple of different things within the product itself. We have what we call our Extract and our Replicat. The Extract is going to be the process that pulls the data out of the database, our capture technology. Our Replicat's going to be the one that applies the data into the target system, or you can also look at it as a push technology. We have what we call our Distribution Path. Our Distribution Path is going to be how we're sending the data across the network. A lot of times when customers run GoldenGate, they don't have the luxury of just having a single server of GoldenGate that can pull data from one database and push data into another one. They need to set up multiple hops of that data. And so in that case, we would use what we call a Distribution Path to send that data from one system to the next. We also have what we call a Target Initiated Path. It's kind of a subset of your Distribution Path, but it allows you to communicate from a less secure environment into a more secure environment. 02:33 Lois: Nick, what about parameter names. I've seen them in uppercase…title case…does that matter? Nick: GoldenGate has a lot of parameters. This is something you'll see all over the place within GoldenGate itself. These parameters are in your Extract and Replicat parameter files during your distribution path parameter files. Parameters for GoldenGate are case insensitive. Within your own environments, you can set it up to have lowercase, mixed case, whatever you want, but just be aware that they are case insensitive. GoldenGate doesn't care, it's just for readability. And then we also have something called trail files. Trail files is where GoldenGate stores all the data before we're able to apply it into that target system. Think about it as our queuing mechanism, and we're queuing everything outside the database so that we're not overloading those database environments. And that's some of the terminology for the product itself. We also have microservices within GoldenGate. 03:31 Nikita: And at the heart of everything is the Service Manager, right? Talk to us about what it is and what it does. Nick: The service manager is responsible for making sure that everything else is up and running. If you are familiar with GoldenGate classic architecture, this is kind of similar to a GoldenGate manager where that process was there to make sure that processes were running the trail files, or excuse me, that certain error logs were getting written out. If a process went down, the manager would restart that process. The service manager is performing a lot of those same functions. Now attached to the service manager, we have our configuration service. This is new in GoldenGate 23ai. This configuration service is going to allow you to set up GoldenGate for highly available environments. So you can build HA into GoldenGate itself using the configuration service. 04:22 Lois: And what does this configuration service do? Nick: This configuration service essentially moves the checkpoint files that used to be on disk into a database so that everything can be stored inside of a database. Also attached to the service manager, we have the performance metric service. This is a service that is going to be gathering all the performance metrics of GoldenGate. So it's going to tell you how fast things are going, what the latencies are, how many bytes per second we're reading from, the transaction logs or writing to our trail files. How quickly a distribution path is sending data across a network. If you want to know any of your lag information, you'll get it from the performance metrics server. We also have the receiver service and the distribution service. These two work hand in hand to establish network communication between two GoldenGate environments. So on what we call our source system, we have a distribution service that's going to send the data to our target system. On the target system, a receiver service is going to receive that data and then rewrite the trail files. We also have the administration service that's responsible for authentication and authorization of the users, as well as making sure that people have access to the right information. 05:33 Nikita: Ok. Moving on the deployment, how is GoldenGate actually deployed, Nick? Nick: GoldenGate is kinda nice. So the way that the product is installed is you install the GoldenGate environment and that's what we call our service manager deployment under a specific GoldenGate home. So the software binaries themselves get installed under a home, we'll say U01/OGG23AI. Now once I've installed GoldenGate once, that's my OGG home. I can now have any number of service managers and deployments tied to that same home. 06:11 Lois: Ok, let's work with an example to make this simpler. Let's say I've got a service manager that's going be responsible for three different deployments: Accounting, Finance, and Sales. Nick: Each of these deployments is going to reside in its own directory. Each of these deployments is going to have its own set of microservices. And so this also means that each of these deployments can have their own set of users. So the people that access the GoldenGate accounting deployment can be different than the ones that access the sales deployment. This means with this distribution of roles that I can have somebody come in and administer the sales database, but they wouldn't have any information or any access to accounting or finance. And this is very important, it allows you to really pull that information apart and separate it. Each of these environments also has their own set of parameter files, Extract process, Replicat process, distribution services, and everything. So it's a very nice way of splitting things up, but all having them tied to the same GoldenGate home system. And this home is very important. So I can take a deployment, let's say my finance deployment, and if I want to move it to a new GoldenGate home and that GoldenGate home is a different version, like let's say that my original home is 23.4, my new GoldenGate home is 23.7, I simply stop that GoldenGate deployment. I stopped at a finance deployment. I changed its OGG home from 23.4 to 23.7. I restart the deployment, that deployment is automatically upgraded to the new environment and attached to the new system. So it makes upgrading very, very simple, very easy, very elegant. 07:53 Nikita: Ok. So, we've spoken about the services…some of the terminology. Let's get into the architecture next. Nick: So when we talk about the architecture for GoldenGate, we used to have two different architectures. We had a classic architecture and a microservices architecture. Classic architecture was something that's been around since the very beginning of GoldenGate in the late '90s. We announced that, that architecture was deprecated in 19c. And Oracle deprecated means that feature is no longer going to be enhanced and it'll be patched selectively. And at some point in the future, it'll be entirely desupported. Well, GoldenGate 23ai is that future. And so in 23ai, the classic architecture is desupported, that means that it's no longer in the build at all. And so it's just microservices architecture. 08:41 Lois: Is there a tool to assist with this migration? Nick: We do have a migration utility that will convert an old classic architecture into the new microservices architecture. But there is quite a bit of learning curve to the new microservices architecture. So it's important that we go through how it works in the changes. 09:04 Are you looking to optimize your implementation strategies and improve efficiency? We have a solution for you! Our new Oracle Fusion Cloud Applications Foundations training and certification program. You'll learn to leverage Oracle Modern Best Practice (OMBP) to re-imagine business processes using advanced technologies in Oracle Fusion Cloud Applications such as AI, mobile, analytics, and more. Visit mylearn.oracle.com to get started today. 09:37 Nikita: Welcome back! Nick, what are the benefits of this microservices architecture? Nick: It's got that simplified lifecycle for patching and upgrading. A lot of the GoldenGate patches that you get, especially these bundle patches, are complete installs as well. So you can go into My Oracle Support and download a complete install of a patch and that way, you don't have to use old patch to apply them. The only time you'll be using old patch is for one-off patches or smaller patches that need to be applied to your GoldenGate system. The microservices product has the same trusted Capture and Apply process that Classic did. There's almost no changes between the two except on how they communicate with their parent processes. And so the same logic that you use to pull data from Oracle or to apply data into Oracle is all the same. 10:25 Lois: And has the interface been upgraded as well? Nick: We've added a really nice, easy to use web interface for the microservices version of GoldenGate. Not only is this web interface work with all your standard browsers, but it's also mobile friendly too. So I can actually control and administer GoldenGate right through my mobile device. It also has new secure remote administration. This is something that the classic architecture was really missing. And so in the classic architecture, to use the command line interface, you had to log into the database server where GoldenGate was installed. Now, the command line interface, as well as the web interface and the REST API, all use remote administration and authentication. So that means that I can install the new command line interface or what we call admin client on my laptop locally and I can connect to any GoldenGate deployment as long as I have the username and password for that deployment. It's also more secure. GoldenGate microservices can also be deployed on premise or in OCI as a service and now also on these third-party clouds like Azure and Google Cloud. And it's also easier for developers to integrate in with the APIs themselves. Everything that GoldenGate does through the admin client as well as the web UI can all be traced. The REST API calls for GoldenGate are all fully published so you can get them right directly from the documentation, you can build your own web interface if you want to. So it makes it very easy. The REST APIs are also streamlined. With a single REST API call, I can do something like add an Extract process, create it, set up my parameter file, and set up the trail files all with a single API command. Whereas in the past, it would require multiple command line interface commands to do that same thing. So it's extremely elegant, very advanced. 12:16 Nikita: What does the microservices architecture look like? I know it's a bit complicated when we're not actually looking at a diagram of it, but just a high level, can you explain the different parts of it? Nick: It's pretty straightforward. But essentially what you've got on each system is a service manager. That service manager is then going to have a number of processes or services beneath it. It'll have the configuration service that stores the checkpoint information for GoldenGate. It'll have the administrative service for the authentication and users, the distribution service to send the data across a network, a receiver service to receive that information, performance metrics to get the performance statistics out of GoldenGate. And then of course, you also have your Extracts and Replicats that capture and apply technology. Each of those Extracts and Replicats will then connect to a database on the Extract side of things. That Extract is going to write to trail files. Those trail files are then going to be sent across the network where they're rebuilt on the target system and the Replicat's going to consume them and apply them into the target database. So the Replicat behaves almost like an end user. So it's taking that trail file data and simply converting it to DML operations, insert, update, delete, or a DDL operation in the case of Oracle, alter table, create table, et cetera, to go into that target database. 13:39 Lois: To look at a diagram of this architecture and learn about it in more detail, check out the Oracle GoldenGate 23ai Fundamentals course on mylearn.oracle.com. So, Nick, if I'm looking to deploy GoldenGate, what should I primarily keep in mind? Nick: So as you go to install GoldenGate and you look at a deployment, there's a couple of important environment variables that you want to make sure you're aware of. So one of the first ones is your OGG_Home. This environment variable is extremely important. This is the location of the GoldenGate software itself. And I want to stress how important it is to always use version numbers when you're setting up your GoldenGate home. When you go to install the software, if you're installing GoldenGate 23.5, use 23.5 within the home directory structure. If you're installing GoldenGate 23.7, use 23.7 inside that directory structure. 14:33 Nikita: Right… that way I'll always know which versions are which, and it'll make it really easy to upgrade and move from one version to the next. Ok, got it. What else, Nick? Nick: There's a couple other important directories. You have your OGG_ETC_HOME. This is where things like the configuration files are going to reside, parameter files, all your certificates for security, including the wallets where we store the credentials for not only the database accounts, but also for the GoldenGate user accounts as well. We have our GoldenGate variable home directory or VAR home. This is where all the GoldenGate log files are residing. And these are the log files that allow you to see what's going on in GoldenGate for auditing purposes. Anytime anybody makes a change to GoldenGate, you're going to see information go into the log files on what was happening and how it was working and what they did, what time they did, what command they issued. Another big important feature about these log files is it also gives you error information and troubleshooting details. So if you ever need to find out what happened in GoldenGate, what went wrong, you would look at these log files to find out that information. And then you also have your OGG_DATA_HOME. This is where those trail files are going to go. Essentially, this is kind of the queuing or overflow for GoldenGate. There's a couple of other additional components. We've got the admin client. This is our command line utility. If you don't want to use a web browser or prefer a command line utility, you can use the admin client. The admin client is also fully scriptable. So if you wanted to write scripts that would go off and automate things in GoldenGate, you can do that. A lot of customers did that with GGSCI in the classic architecture. You can do the same thing now with the admin client. The other component is the microservices security authentication and authorization services. These handle communication security, especially making sure that any passwords or usernames and everything like that is all encrypted. And instead of using an actual username and password, everything through the product is going to be done through an alias. And then it also handles all the authorization authentication, permissions, user accountability, and roles within GoldenGate. 16:39 Lois: Anything else you'd like to talk about before we wrap up for today, Nick? Nick: I also wanted to take a minute to talk about the REST API. All the microservices provide REST APIs to administer them and all of these are fully documented. They can be used by any client that can make REST API calls. So if you wanted to use Python, cURL, a web browser, you can do that as well. They're all just HTTP or HTTPS calls, get, put, patch, the standard REST API standards. And then GoldenGate does provide our admin client as well as a WebUI that use these REST APIs under the covers if you ever wanted to get a more advanced look at how it works. 17:18 Nikita: Well, that's all the time we have for today. Thanks for joining us, Nick. Lois: Yes, thanks Nick. We look forward to having you back next week to talk with us about security strategies and data recovery. Nikita: And if you want to learn more about the topics we discussed today, head over to mylearn.oracle.com and take a look at the Oracle GoldenGate 23ai Fundamentals course. Until next time, this is Nikita Abraham… Lois: And Lois Houston, signing off! 17:43 That's all for this episode of the Oracle University Podcast. If you enjoyed listening, please click Subscribe to get all the latest episodes. We'd also love it if you would take a moment to rate and review us on your podcast app. See you again on the next episode of the Oracle University Podcast.
Scott and Wes break down the latest in JavaScript news, including new async patterns in Svelte, React Server Component tooling with Parcel, and Redwood's push into Cloudflare with its new SDK. They also cover what's new in Storybook 9 Beta, from visual testing to a sleeker, lighter build. Show Notes 00:00 Welcome to Syntax! 02:50 Brought to you by Sentry.io. 03:37 Syntax Meetup! 04:09 React View Transitions. 08:58 addTransitionType. 11:18 Activity API. Offscreen Renamed to Activity. 14:22 Maintaining state in search queries. 16:29 Asynchronous Svelte. Playground. 19:04 Svelte Boundary. 25:13 Parcel RSC. 27:15 Redwood SDK. 30:55 Storybook 9 Beta. Hit us up on Socials! Syntax: X Instagram Tiktok LinkedIn Threads Wes: X Instagram Tiktok LinkedIn Threads Scott: X Instagram Tiktok LinkedIn Threads Randy: X Instagram YouTube Threads
This episode's Community Champion Sponsor is Ossur. To learn more about their ‘Responsible for Tomorrow' Sustainability Campaign, and how you can get involved: CLICK HEREEpisode Overview: Healthcare's integration challenges have reached a critical juncture where clinicians demand seamless technology that enhances rather than hinders patient care. Our next guest, John Orosco, is revolutionizing this landscape as CEO of Red Rover Health. With over 25 years of healthcare IT experience, including his foundational role at Cerner developing their first API platform, John witnessed firsthand how rigid integration systems stifle innovation. This insight led him to co-found Red Rover Health, creating a normalized SaaS platform that serves as "the App Store for healthcare." By enabling true best-of-breed solutions through standardized APIs, John is breaking down the barriers that have long frustrated healthcare organizations. Join us to discover how Red Rover's pioneering approach is empowering providers to choose the tools they need while maintaining seamless EHR connectivity. Let's go!Episode Highlights:Healthcare's open integration platforms often get shut down when they threaten vendor sales of proprietary solutionsRed Rover Health serves as "the App Store for healthcare," enabling seamless third-party app integration with EHR systemsThe joke "if you've seen one HL7 interface, you've seen one" reflects how every integration requires custom codeHealthcare CIOs often function as "EMR administrators" rather than true technology innovatorsAI/ML represents the next frontier, with Red Rover positioning to enhance data access with AI-powered insightsAbout our Guest: John is a healthcare IT entrepreneur and expert in Electronic Health Record (EHR) integration with over 25 years of experience. He started as a software developer at Cerner Corporation, where he led the first Millennium RESTful integration team. John later founded JASE Health, providing custom EHR integrations for healthcare IT vendors, before co-founding Red Rover Health to develop a normalized SaaS platform for EHR integration. John is dedicated to solving complex EHR challenges and enabling healthcare providers to implement best-of-breed solutions regardless of their EHR system.Links Supporting This Episode: RedRover Health Website: CLICK HEREJohn Orosco LinkedIn page: CLICK HERERed Rover Health LinkedIn: CLICK HEREMike Biselli LinkedIn page: CLICK HEREMike Biselli Twitter page: CLICK HEREVisit our website: CLICK HERESubscribe to newsletter: CLICK HEREGuest nomination form: CLICK HERE
We all talk about #AI, but what good is it if your models are powered by stale, outdated data?In Episode 99 of Great Things with Great Tech, Deepti Srivastava, founder and CEO of Snow Leopard, and former founding PM of Google Spanner, calls out the broken state of enterprise AI. With decades of experience in distributed systems and data infrastructure, Deepti unveils how Snow Leopard is redefining how AI applications are built, by tapping into live, real-time data from SQL and APIs without the need for ETL or pipelines.Instead of relying on static snapshots or disconnected data lakes, Snow Leopard's #agentic platform queries native sources like PostgreSQL, Snowflake, and Salesforce on-demand, empowering AI to live directly in the critical decision path.In This Episode, We Cover:Deepti's journey from building Spanner at Google to founding Snow Leopard AI.Why most enterprise AI fails due to reliance on stale data and outdated pipelines. How Snow Leopard federates live data across SQL and APIs with zero ETL.The limitations of vector databases in structured, real-time business use cases.Why putting AI in the critical path of business decisions unlocks real value.Snow Leopard is a U.S.-based technology company founded in 2023 by and is Headquartered in San Francisco, CaliforniaSnow Leopard specializes in building a platform that enables the development of production-ready AI applications by leveraging live business data. The company's approach focuses on real-time data retrieval directly from sources like SQL databases and APIs, eliminating the need for traditional ETL processes and data pipelines. This innovation allows for more accurate and timely AI-driven business decision.PODCAST LINKSGreat Things with Great Tech Podcast: https://gtwgt.comGTwGT Playlist on YouTube: https://www.youtube.com/@GTwGTPodcastListen on Spotify: https://open.spotify.com/show/5Y1Fgl4DgGpFd5Z4dHulVXListen on Apple Podcasts: https://podcasts.apple.com/us/podcast/great-things-with-great-tech-podcast/id1519439787EPISODE LINKSSnow Leopard Web: https://www.snowleopard.ai/Deepti Srivastava on LinkedIn:https://www.linkedin.com/in/thedeepti/Snow Leopard on LinkedIn: https://www.linkedin.com/company/snow-leopard-ai/GTwGT LINKSSupport the Channel: https://ko-fi.com/gtwgtBe on #GTwGT: Contact via Twitter/X @GTwGTPodcast or visit https://www.gtwgt.comSubscribe to YouTube: https://www.youtube.com/@GTwGTPodcast?sub_confirmation=1Great Things with Great Tech Podcast Website: https://gtwgt.comSOCIAL LINKSFollow GTwGT on Social Media:Twitter/X: https://twitter.com/GTwGTPodcastInstagram: https://www.instagram.com/GTwGTPodcastTikTok: https://www.tiktok.com/@GTwGTPodcast
How do you bring structure to the chaos of service pricing? In this episode, Frank talks with Tracey Shirtcliff, founder of ScopeBetter, a "Services CPQ" platform helping creative agencies and consultancies ditch the spreadsheets and build scalable, repeatable pricing models. Tracey shares her journey from building Traffic Live to launching ScopeBetter, and why most of their competition is still Excel. You'll hear about: Why service pricing is messy — and how to fix it How AI and automation are reshaping the billable hour The role of integrations, open APIs, and their 12-week implementation model What it means to give teams pricing consistency across roles, regions, and workflows From SaaS innovation to outdoor adventure and biohacking, Tracey's passion for pushing limits comes through—don't miss this unique look into the future of services CPQ.
“Who's Cheating?” asks Keith Teare in his weekly summary of tech news. Keith is defending a Columbia University student who was punished for openly used AI in his classes. As Arthur C. Clark famously noted, advanced technology is indistinguishable from magic, and so its use is often viewed as cheating by the old regime. But, as Keith and I agree, the $80,000 annual fees that universities are now charging for an undergraduate education could also be seen as a particularly egregious form of cheating. Especially since that a similar education could mostly be achieved by a $20 monthly OpenAI account. Five Takeaways* AI usage in education is causing institutional resistance, with a Columbia student's expulsion highlighting the tension between traditional learning and new technology adoption.* Universities face an existential crisis as AI makes knowledge more accessible, potentially undermining their expensive business model of gatekeeping talent.* Google's search dominance is threatened as Apple explores AI alternatives and companies like Anthropic develop competitive search APIs.* OpenAI is navigating a complex transition, maintaining non-profit governance while uncapping profit potential, signaling Altman's focus on commercial applications.* The future of AI lies in the application layer, with OpenAI's hiring of Instacart's CEO for applications suggesting a strategy to own the entire AI stack from infrastructure to user interface.Keen On America is a reader-supported publication. To receive new posts and support my work, consider becoming a free or paid subscriber. This is a public episode. If you'd like to discuss this with other subscribers or get access to bonus episodes, visit keenon.substack.com/subscribe
What if blockchains could communicate as easily as APIs? In The Index's Everything SVM episode, Alex Kehaya and Omar Zaki sit down with Dean Little, Co-founder and Chief Scientist at Zeus Network, which is building a seamless way to connect Bitcoin and other major blockchains to the Solana ecosystem. His other work includes cryptography research at Jupiter Research Center, where he focuses on advancing secure blockchain systems. In this episode, Dean unpacks the breakthroughs driving cross-chain interoperability forward.The Everything SVM conversation dives into JupNet — a groundbreaking SVM chain designed to “aggregate anything, verify anywhere,” unlocking seamless cross-chain activity without the usual friction. Dean breaks down what sets JupNet apart from protocols like IBC, from its novel approach to validator trust to the way its architecture hides complexity behind an intuitive user experience.We also explore Dean's cutting-edge Quantum Vault project, where he's using Winternitz One-Time Signatures (WOTS), to build quantum-resistant vaults on Solana — a bold move to safeguard crypto assets against the looming threat of quantum computing.If you're serious about building cross-chain systems, exploring SVM innovation, or staying ahead of where blockchain infrastructure is headed, this is an episode you can't afford to miss.
This is Twitch Tales, an interactive D&D (Dungeons and Dragons) 5e series run by me over on my Twitch channel. https://twitch.tv/roberthartleygmIn this special 100th episode, Apis and the rest of the BeeTeam are taking on the undead bodakicorn, Travis... I am sure it's going to be fine. Right? RIGHT?This stream ended up over 6.5 hours long, so we have broken it into two parts, this is the second part, so if this is the first one you are seeing then you might want to look for part 1!Thank you to everyone who participated and if you want to join in and influence the story, head over to Twitch and follow to be notified when I go live!Thanks to Jen Toher for editing and for coding my overlays, and to Michael Glasswell ( https://www.twitch.tv/spideynz ) for providing the art assets for the overlays. Thanks also to cinderfingers for the Twitch Tales Logos ( https://www.deviantart.com/cinderfingers ).The epic intro music was composed by Magical Music Manufacturing (Wesley Chu, Allan Hon, Jacob Kudjer, Alexander Zhu). Check them out at https://www.magicalmusicmanufacturing.comSUPPORT MY WORK:If you want to support me financially, so I can make more of this sort of content, you can do so on Patreon. https://www.patreon.com/RobertHartleyGMIf you want to wear or drink from my logo or designs on some merch, check out my store. https://shop.roberthartleygm.comAnother way to support me is to browse some things that I am affiliated with:Dice Goblin for lovely dice: https://dicegoblin.co.uk/?af=roberthartleygmModular Realms for epic magnetic terrain: https://www.modularrealms.com/RobertHartleySimply clicking the links will help me, but buying some items via my affiliate link helps me, the companies AND you!SOCIALS:Twitch: https://www.twitch.tv/roberthartleygmDiscord: https://discord.gg/Tam2QpufaKInstagram: https://www.instagram.com/roberthartleygmCameo: https://www.cameo.com/roberthartleygmTwitter: https://www.twitter.com/roberthartleygmPodcast: https://open.spotify.com/show/6AEITpjYEbeOM4hUmvv08NWebsite: https://roberthartleygm.com
Sami talks with Tom Akehurst, Co-Founder of WireMock (https://www.wiremock.io/), about the delay and disconnect between front and back end development and how WireMock set out to bridge the two together. Tom explains how his time working for Disney paved the way for WireMock, the different processes of mocking and testing APIs, and provides some useful advice on how to improve your testing process as a whole. Sami also puts Tom's knowledge to the test as he seeks some feedback on a real world example he's been working on recently. — Interested in improving your testing and mocking process? Try out WireMock for free (https://www.wiremock.io/), and get to grips with what it has to offer through WireMock Cloud Academy (https://www.wiremock.io/academy). If you get stuck at any point you can join their Slack channel and ask the community for advice (https://wiremock-community.slack.com/join/shared_invite/zt-2vjv6lkhz-evIN6Vg6xhFOQ8GoSnGtmQ#/shared-invite/email)! Want to get in touch with Tom directly? You can contact him through LinkedIn (https://www.linkedin.com/in/tomakehurst/) or via email - tom@wiremock.org Your host for this episode has been Sami Birnbaum. Sami can be found through his website (https://samibirnbaum.com) or via LinkedIn (https://www.linkedin.com/in/samibirnbaum/). If you would like to support the show, head over to our GitHub page (https://github.com/sponsors/thoughtbot), or check out our website (https://podcast.thoughtbot.com). Got a question or comment about the show? Why not write to our hosts: hosts@giantrobots.fm This has been a thoughtbot (https://thoughtbot.com/) podcast. Stay up to date by following us on social media - LinkedIn (https://www.linkedin.com/company/150727/) - Mastodon (https://thoughtbot.social/@thoughtbot) - Bluesky (https://bsky.app/profile/thoughtbot.com) © 2025 thoughtbot, inc.
Our guest on this episode of Data Driven Finance is Jeff Cain, VP Fintech Research at Fidelity Investments. Before that he was Head of Partnerships at Brightside and spent eight years at Yodlee. Jeff got his Bachelor's Degree in Economics at Stanford and a Masters from Harvard. We're not really talking about Fidelity; we're going bigger picture and getting Jeff's personal take on wealth building and tech's role in that. Topics covered include: How customers can be segmented to track behaviors, demographics, and goals. Are behaviors driving technology or are tech innovations changing what consumers want? How are finserv businesses doing at keeping up with consumer demands and innovating around those? What are the big trends in financial consumer behavior? And likewise, what are the coming trends in fintech? When it comes to the third-party apps and players, what's going to separate the winners from the losers? Why should banks and financial institutions fully embrace APIs, data sharing, and open banking? What to look forward to and what to be cautious about as we move through 2025. Helpful Links: Fidelity Center for Applied Technology Jeff Cain on LI
In this episode, Daniel and Chris unpack the Model Context Protocol (MCP), a rising standard for enabling agentic AI interactions with external systems, APIs, and data sources. They explore how MCP supports interoperability, community contributions, and a rapidly developing ecosystem of AI integrations. The conversation also highlights some real-world tooling such as FastAPI-MCP.Featuring:Chris Benson – Website, GitHub, LinkedIn, XDaniel Whitenack – Website, GitHub, XLinks:Protocol websiteAnthropic blog postBlog post - Model Context Protocol (MCP) an overviewFastAPI-MCPHow to Use FastAPI MCP Server: A Complete Guide Candle (Rust framework)
Kelly Goetsch is the Chief Operating Officer of Pipe17, which specializes in AI-powered composable order operations. Before joining Pipe17, he served as the Chief Strategy Officer at commercetools, where he played a pivotal role in scaling the company to over $100 million in annual recurring revenue. Kelly also co-founded MACH Alliance, a nonprofit industry organization advocating for Microservices, APIs, Cloud-native, and Headless (MACH) technologies. In this episode… Customers expect fast fulfillment and delivery across various selling channels, including social media and marketplaces. Traditional systems struggle to keep pace, leaving companies tangled in connectivity issues between their sales, inventory, and fulfillment networks. How can brands deliver seamless, cost-effective experiences while scaling across these fragmented digital touchpoints? With experience in AI-driven order management, Kelly Goetsch advises brands to adopt a connectivity-first model. This requires integrating a flexible routing layer that connects selling channels, back-office systems, and fulfillment partners, enabling dynamic order flow based on cost, speed, and product needs. Kelly also recommends embracing emerging sales platforms like TikTok and leveraging AI tools to align with how customers discover products, noting that companies must modernize their operations or risk falling behind in today's competitive landscape. In today's episode of The Digital Deep Dive, Aaron Conant speaks with Kelly Goetsch, COO of Pipe17, about reshaping order management for AI-driven shopping. Kelly explains how selling channels have evolved, marketing gaps in midsize brands, and how voice commerce has shaped emerging conversational shopping experiences.
What separates the top 1% of venture capitalists from the rest? For Roger Ehrenberg, Managing Partner at Eberg Capital, it's the ability — and the appetite — to invest before the crowd, before the product is built, and before there's even proof of concept. In a recent episode of the Skin in the Game VC podcast, Roger joined Tom Wallace and Saxon Baum to share how he turned a late-career pivot into one of the most impressive track records in early-stage venture capital.Roger didn't come from the startup world. He spent nearly two decades on Wall Street, running billion-dollar trading desks at Citi and Deutsche Bank. From the outside, it looked like a career anyone would want — but for Roger, it had run its course. Tired of internal politics and craving something more entrepreneurial, he walked away. Around the same time, he'd been dabbling in angel investing on the side. That small experiment — backing builders before product-market fit — quickly turned into a full-time obsession.He began writing a blog, Information Arbitrage, to share his thinking publicly. The blog gained traction. Founders started reaching out. Other investors began to follow his thesis. At a time when the idea of a “New York tech ecosystem” was almost laughable, Roger had the clarity to see where it could go — and the conviction to act. By early 2010, he scraped together a $17 million first close. That first fund would eventually land at $50 million, and IA Ventures was born.But the money was only part of the story. What set Roger apart then — and still does — is how early he's willing to go. He prefers backing companies before the market even knows they exist. In fact, he often writes the first check before there's a line of code written. This isn't blind optimism. It's founder-first investing grounded in deep research and sharp intuition.Roger's track record speaks for itself. He was an early backer of The Trade Desk when it was just a deck. He seeded Datadog, TubeMogul, and multiple other companies before they became category leaders. The common thread? Founders who could not only see the future but build their way into it. To Roger, great founders share something intangible: what he calls “aesthetic and empathy.”“Great founders understand where their product stops and where the customer starts,” he said. That could mean designing APIs that developers love or building consumer apps that feel inevitable. Either way, the best founders have an intuitive sense of product, user behavior, and market timing. Roger knows how to find them — or maybe, they know how to find him. That's the power of publishing, he says. His blog didn't just clarify his thesis — it attracted the right people. It helped him raise a fund when few believed in early-stage investing outside Silicon Valley.Since then, IA Ventures has grown to four funds and backed dozens of successful startups. Roger has since passed the torch to his partners and launched his next chapter: Eberg Capital. Now, he invests alongside his sons in a new wave of innovation — spanning sports, media, entertainment, and the evolving world of fandom.But whether he's backing a Marlins ownership stake, investing in Formula 1, or writing angel checks to creator economy startups, one thing hasn't changed: Roger Ehrenberg still goes early. He still backs founders before the world sees their potential. And more often than not, he's right.Listen to the full episode with Roger Ehrenberg now. Hosted on Acast. See acast.com/privacy for more information.
The key to improving patient engagement lies in reducing friction and delivering rich communication experiences directly to the consumer. In this episode, Myron Wallace, Fractional Chief Product Officer at White Label Communications, discusses how his organization is simplifying healthcare communications through APIs that integrate telephony into SaaS solutions. He highlights the potential of Rich Communication Services (RCS) to enhance patient engagement by delivering interactive content directly within messages, reducing the need for separate applications. Myron also explores how organizations are using RCS for secure, branded messaging in areas like e-sign consent and patient education. While he acknowledges AI's potential, he warns against the hype and stresses the importance of regulatory oversight and reducing patient friction through practical technologies like RCS. Tune in and learn how RCS could transform patient communication and engagement. Resources: Connect with and follow Myron Wallace on LinkedIn. Learn more about White Label Communications on their LinkedIn and website. Discover more about Myron on his website.
At RSAC Conference 2025, Rupesh Chokshi, Senior Vice President and General Manager of the Application Security Group at Akamai, joined ITSPmagazine to share critical insights into the dual role AI is playing in cybersecurity today—and what Akamai is doing about it.Chokshi lays out the landscape with clarity: while AI is unlocking powerful new capabilities for defenders, it's also accelerating innovation for attackers. From bot mitigation and behavioral DDoS to adaptive security engines, Akamai has used machine learning for over a decade to enhance protection, but the scale and complexity of threats have entered a new era.The API and Web Application Threat SurgeReferencing Akamai's latest State of the Internet report, Chokshi cites a 33% year-over-year rise in web application and API attacks—topping 311 billion threats. More than 150 billion of these were API-related. The reason is simple: APIs are the backbone of modern applications, yet many organizations lack visibility into how many they have or where they're exposed. Shadow and zombie APIs are quietly expanding attack surfaces without sufficient monitoring or defense.Chokshi shares that in early customer discovery sessions, organizations often uncover tens of thousands of APIs they weren't actively tracking—making them easy targets for business logic abuse, credential theft, and data exfiltration.Introducing Akamai's Firewall for AIAkamai is addressing another critical gap with the launch of its new Firewall for AI. Designed for both internal and customer-facing generative AI applications, this solution focuses on securing runtime environments. It detects and blocks issues like prompt injection, PII leakage, and toxic language using scalable, automated analysis at the edge—reducing friction for deployment while enhancing visibility and governance.In early testing, Akamai found that 6% of traffic to a single LLM-based customer chatbot involved suspicious activity. That volume—within just 100,000 requests—highlights the urgency of runtime protections for AI workloads.Enabling Security LeadershipChokshi emphasizes that modern security teams must engage collaboratively with business and data teams. As AI adoption outpaces security budgets, CISOs are looking for trusted, easy-to-deploy solutions that enable—not hinder—innovation. Akamai's goal: deliver scalable protections with minimal disruption, while helping security leaders shoulder the growing burden of AI risk.Learn more about Akamai: https://itspm.ag/akamailbwcNote: This story contains promotional content. Learn more.Guest: Rupesh Chokshi, SVP & General Manager, Application Security, Akamai | https://www.linkedin.com/in/rupeshchokshi/ResourcesLearn more and catch more stories from Akamai: https://www.itspmagazine.com/directory/akamaiLearn more and catch more stories from RSA Conference 2025 coverage: https://www.itspmagazine.com/rsac25______________________Keywords:sean martin, rupesh chokshi, akamai, rsac, ai, security, cisos, api, firewall, llm, brand story, brand marketing, marketing podcast, brand story podcast______________________Catch all of our event coverage: https://www.itspmagazine.com/technology-and-cybersecurity-conference-coverageWant to tell your Brand Story Briefing as part of our event coverage? Learn More
Today's guest is Akhil Khunger, VP of Quantitative Analytics at Barclays. Akhil joins us to explore how financial institutions are modernizing stress testing, risk modeling, and strategic planning through AI. Throughout the episode, Akhil discusses the evolving architecture of financial models — specifically how modular, decoupled processes can speed up regulatory compliance and empower faster decision-making. He outlines how AI-powered code generation and user-friendly APIs are enabling more targeted scenario analysis without compromising performance across large, complex portfolios. Later, we highlight how global teams are leveraging AI to reduce dependency on legacy tech stacks and streamline business planning across jurisdictions. Want to share your AI adoption story with executive peers? Click emerj.com/expert2 for more information and to be a potential future guest on the ‘AI in Business' podcast! This episode is sponsored by Automation Anywhere. Learn how brands work with Emerj and other Emerj Media options at emerj.com/ad1.
PMF is MIA without JTBD. Make sense? :DThe "job to be done" sits at the core of my customer's use of my product. I need to understand it to understand them. To fathom their needs.This week, I'll share how I approach that — and why it's taken me years to get here.The blog post: https://thebootstrappedfounder.com/the-job-to-be-done-understanding-customer-value-communication/The podcast episode: https://tbf.fm/episodes/388-the-job-to-be-done-understanding-customer-value-communicationCheck out Podscan, the Podcast database that transcribes every podcast episode out there minutes after it gets released: https://podscan.fmSend me a voicemail on Podline: https://podline.fm/arvidYou'll find my weekly article on my blog: https://thebootstrappedfounder.comPodcast: https://thebootstrappedfounder.com/podcastNewsletter: https://thebootstrappedfounder.com/newsletterMy book Zero to Sold: https://zerotosold.com/My book The Embedded Entrepreneur: https://embeddedentrepreneur.com/My course Find Your Following: https://findyourfollowing.comHere are a few tools I use. Using my affiliate links will support my work at no additional cost to you.- Notion (which I use to organize, write, coordinate, and archive my podcast + newsletter): https://affiliate.notion.so/465mv1536drx- Riverside.fm (that's what I recorded this episode with): https://riverside.fm/?via=arvid- TweetHunter (for speedy scheduling and writing Tweets): http://tweethunter.io/?via=arvid- HypeFury (for massive Twitter analytics and scheduling): https://hypefury.com/?via=arvid60- AudioPen (for taking voice notes and getting amazing summaries): https://audiopen.ai/?aff=PXErZ- Descript (for word-based video editing, subtitles, and clips): https://www.descript.com/?lmref=3cf39Q- ConvertKit (for email lists, newsletters, even finding sponsors): https://convertkit.com?lmref=bN9CZw
Web and Mobile App Development (Language Agnostic, and Based on Real-life experience!)
In this conversation, Jesse Flores discusses the evolution of web development in the context of AI, emphasizing the need for websites to cater to both humans and AI agents. He introduces the concept of 'smart sites' designed for AI interactions, explores the technical aspects of AI agent communication, and discusses the future of websites as AI agents become more prevalent. The conversation also touches on the role of APIs and the handling of unstructured data in AI interactions. In this conversation, Krish Palaniappan and Jesse Flores discuss the evolution of databases, the importance of choosing the right database for specific tasks, and the impact of AI on development. They explore how UI/UX design must adapt to accommodate conversational interfaces and the disparities in technology adoption across the globe. Jesse shares insights on the future of development, emphasizing the need for a philosophical approach to technology, and concludes with a personal touch about his favorite foods.
On this episode of the Scouting For Growth podcast, Sabine VdL talks to Sara Simeone, an award-winning entrepreneur behind NoCodeLab.ai, the First Vibe Coding Launchpad that helps non-technical dreamers ship AI-powered products in just five weeks—no keyboard sorcery required. Whether you’re a Gen Z founder sketching ideas on a dorm whiteboard, an investor scouting the next scalable platform, or a corporate leader hunting for fresh growth engines, Sara’s story is your front-row seat to how Vibe Coding is about to change the way we build. KEY TAKEAWAYS Vibe coding is defined as creating something using your natural language and vibe with the code to try to understand how the product in front of you is changing as you add more prompts/features. It’s an evolution of the drag-and-drop of no-code platforms but allows you to express yourself in a clear, specific and tangible way to translate visions into products. When I stepped into the startup founder world, I realised that there was a very big problem: There are a lot of subject matter experts who had a lot of dreams, but they couldn’t make these into tangible products. A lot of accelerator programmes only teach you how to launch a product rather than create one because they take for granted that you have a technical co-founder or you can create it yourself, this excludes non-technical founders from a big portion of the entrepreneurial world. Founders don’t need to become techies, but they need a new process to make tch work for them. That’s when I realised AI can help. My goal is to give non-technical founders the creative freedom to move fast but with the discipline of the corporate world. We guide them to develop something new, that wouldn’t have been able to have been developed before. It’s now possible to create, realise and build that idea, it’s a mindset shift where we can become our own CPOs, CEOs, CMO, COOs, etc, we just need the right community around us. I want founders to be aware that they can solve their own problems and they can build something in plain English. When you’re building something, ask yourself who are the customers? What do they need? How much am I going to charge for this? Once there you can start generating technical foundations and product requirements – front/back end, database, APIs, etc in order to create that product. BEST MOMENTS ‘Vibe coding was coined in 2025, so it’s brand new, but I’d been doing it before the term was created.’ ‘AI gives us a lot of tools but we need to know how to use them.’ ‘The beauty of AI platforms is that if you see that something is going wrong you can question the code, understand what’s wrong and ask the AI to fix it for you.’ ‘With vibe coding and NoCodeLab you can build your ideas in days, weeks, or months depending on your technical expertise or background.’ ABOUT THE GUEST Sara Simeone is a multi-award-winning entrepreneur and product strategist who has spent the past two decades turning frontier technologies into real-world growth engines. Today she wears several cutting-edge hats: Founder of NoCodeLab.ai, the first vibe-driven coding accelerator for non-technical founders; CEO & Co-founder of Niftyz.io, the Web3 token-factory that lets brands transform data and IP into tradable digital assets; and lecturer in Blockchain For Business at the MedieInstitutet in Sweden. ABOUT THE HOST Sabine is a corporate strategist turned entrepreneur. She is the CEO and Managing Partner of Alchemy Crew a venture lab that accelerates the curation, validation, & commercialization of new tech business models. Sabine is renowned within the insurance sector for building some of the most renowned tech startup accelerators around the world working with over 30 corporate insurers, accelerated over 100 startup ventures. Sabine is the co-editor of the bestseller The INSURTECH Book, a top 50 Women in Tech, a FinTech and InsurTech Influencer, an investor & multi-award winner. Twitter LinkedIn Instagram Facebook TikTok Email Website
SANS Internet Stormcenter Daily Network/Cyber Security and Information Security Stormcast
More Scans for SMS Gateways and APIs Attackers are not just looking for SMS Gateways like the scans we reported on last week, but they are also actively scanning for other ways to use APIs and add on tools to send messages using other people s credentials. https://isc.sans.edu/diary/More%20Scans%20for%20SMS%20Gateways%20and%20APIs/31902 AirBorne: AirPlay Vulnerabilities Researchers at Oligo revealed over 20 weaknesses they found in Apple s implementation of the AirPlay protocol. These vulnerabilities can be abused to execute code or launch denial-of-service attacks against affected devices. Apple patched the vulnerabilities in recent updates. https://www.oligo.security/blog/airborne
In this Beekeeping Today Podcast Short, Dr. Dewey Caron returns with an “audio postcard” on one of spring's biggest challenges: swarming. In less than 20 minutes, Dewey breaks down the science and management strategies of swarming across three communication levels—bee scientist to beekeeper, beekeeper to bees, and bee to bee. Dewey emphasizes that successful beekeeping often hinges on managing three core issues: overwintering, varroa control, and swarming. Drawing from scientific literature, field experience, and behavioral cues, he details proactive and reactive swarm management practices—from requeening and early supering to Demaree splits, Snelgrove boards, and shook swarms. He also explores the signals bees send each other—pheromones, body heat, piping calls, and buzz running—that guide the colony toward swarming and relocation. If you're looking to better understand how to read your bees this spring and respond before the swarm takes flight, this episode is packed with insights you can put to work in your own apiary. Links & Resources: Honey Bee Obscura Podcast with Dr. Jim Tew: https://honeybeeobscura.com Research Paper, "From Molecules to Societies:..": https://www.researchgate.net/publication/271913315_From_molecules_to_societies_Mechanisms_regulating_swarming_behavior_in_honey_bees_Apis_spp [accessed Apr 06 2025] Tom Seeley's Latest Book: Seeley, Thomas D. 2024. Piping Hot Bees & Boisterous Buzz Runners. Princeton Univ Press Brought to you by Betterbee – your partners in better beekeeping. ______________ Betterbee is the presenting sponsor of Beekeeping Today Podcast. Betterbee's mission is to support every beekeeper with excellent customer service, continued education and quality equipment. From their colorful and informative catalog to their support of beekeeper educational activities, including this podcast series, Betterbee truly is Beekeepers Serving Beekeepers. See for yourself at www.betterbee.com Copyright © 2025 by Growing Planet Media, LLC
In this episode, Myron Kirk, Director of Engineering for Digital and Retail Technology at Pandora, shares the future of e-commerce and digital transformation. Myron shares insights into Pandora's strategy for creating a unified commerce experience across 37 global markets, emphasizing the role of personalization and AI in enhancing customer experiences. The conversation explores Pandora's transition to a composable architecture, balancing stability and flexibility, and the critical role of observability in maintaining reliability. Myron also highlights the integration of AI as a sales concierge and in customer service, aiming to foster efficiency and transform digital commerce. This episode offers valuable lessons for merchants considering similar digital strategies. Show Highlights: Pandora's strategic shift to a composable architecture for a unified commerce experience The balance between stability and flexibility in digital infrastructure Importance of APIs and AI in enhancing digital commerce and customer service experiences AI's role in personalizing retail interactions and improving customer service through sales concierge and conversational search Exploration of unified commerce Follow and Review: We'd love for you to follow us if you haven't yet. Click that purple '+' in the top right corner of your Apple Podcasts app. We'd love it even more if you could drop a review or 5-star rating over on Apple Podcasts. Simply select “Ratings and Reviews” and “Write a Review,” then a quick line with your favorite part of the episode. It only takes a second, and it helps spread the word about the podcast. Supporting Resources: Myron Kirk LinkedIn: https://www.linkedin.com/in/myronkirk Pandora UK: https://uk.pandora.net/en/ Learn more about composable commerce: https://www.salesforce.com/commerce/composable/ Learn more about Agentforce for Commerce: https://www.salesforce.com/commerce/ai/ Join the Commerce Cloud Community: https://sforce.co/commerce-crew *** Episode Credits If you like this podcast and are thinking of creating your own, consider talking to my producer, Emerald City Productions. They helped me grow and produce the podcast you are listening to right now. Find out more at https://emeraldcitypro.com. Let them know I sent you.
In today's financial landscape, innovation is more than just a buzzword—it's a driving force separating industry leaders from those left behind. Finding, nurturing, and scaling the right technologies has become a specialized skill set all its own. Joining us today is Ryan Falvey, Co-Founder and Managing Partner of Restive. Ryan has spent the last 15 years at the forefront of identifying and championing market-changing innovations in financial technology. His track record speaks for itself—since 2015, he's invested in 40 early-stage fintech firms that have collectively grown to represent approximately $3 billion in aggregate equity value. Before founding Restive, Ryan led the development of the Financial Solutions Lab, a groundbreaking partnership between JPMorgan Chase and the Financial Health Network. His experience also includes developing payment solutions with leading tech companies at Silicon Valley Bank and serving as Strategy Group Lead at Enclude Solutions, where he oversaw global strategy consulting for mobile-enabled financial products. “We're not investing in fintech apps — we're investing in infrastructure,” Falvey explains early on. That distinction underscores a larger trend he sees in the market: a move away from flashy consumer-based apps toward foundational financial APIs. It also focuses on backend tooling and embedded finance capabilities. Falvey's insights aren't theoretical — they're rooted in his day-to-day decisions as an investor. At Restive, he's helping startups through early product development. He emphasizes practical scalability and regulation-ready business models. “You don't build a consumer business by launching an app anymore,” he says. “It's not about the app — it's about access, context, and integration.” From fintech regulation to platform economics, Falvey shares grounded wisdom. He focuses on how successful startups are navigating today's uncertain investment landscape. What's emerging is a more nuanced strategy for funding — one that prioritizes durability over disruption.
"For the first time in over a decade, bots now outnumber humans on the internet — and a growing percentage are built to defraud, disrupt, and deceive." — Tim Chang, Global VP & GM, Application Security, Thales In a sobering conversation with Technology Reseller News, Tim Chang of Thales shared key insights from the 2025 Imperva Bad Bot Report, a deep dive into the increasingly dangerous world of automated internet traffic. According to the report, 51% of all web traffic in 2024 was generated by bots, marking the first time bot traffic has surpassed human traffic. Even more concerning, 37% of all traffic is now classified as “bad bot” activity — a significant increase from 32% the previous year. Thales, a global leader in digital identity and cybersecurity with over 80,000 employees worldwide, acquired Imperva two years ago. Together, the teams behind the Imperva Threat Research division are shining a light on the surge in bot-driven attacks — from simple web scrapers to polymorphic, AI-enhanced bad bots capable of account takeovers and API abuse. Telecom Under Attack Among the most targeted sectors? Telecom and ISPs, which now account for more than half of bad bot traffic. Chang explained that this is unsurprising given the critical infrastructure telecom supports and the high volume of customer data flowing through these systems. Key takeaways from the report include: 51% of all internet traffic is now automated. 37% of global traffic comes from bad bots — a 7-point rise in one year. 40% increase in account takeover (ATO) attacks, often using stolen or brute-forced credentials. Telecom ranks as the second-most targeted vertical, just behind financial services. 55% of all telecom traffic is now made up of bad bots. Chang emphasized that these bots are increasingly using AI to evade detection, shifting IP addresses, mimicking human behavior, and attacking not just websites but APIs — which lack visual interfaces and are harder to monitor. 10 Recommendations to Reduce Risk To help organizations defend against this growing threat, Thales provides a set of 10 actionable recommendations, ranging from understanding your attack surface and deploying bot management tools, to tightening MFA usage and adopting a multi-layered defense strategy. Chang also offered a strategic reminder: don't play all your cards at once — adversaries are evolving just as quickly, and a staggered, adaptive defense is critical. Access the full 2025 Imperva Bad Bot Report: Download the Report from Thales/Imperva
Subscribe to the ECB newsletter: https://newsletter.ecommercecoffeebreak.com/ ---Expanding into international markets can jumpstart growth for e-commerce brands, but proper systems are crucial for managing the increased complexity. In this episode, Sharoon Thomas, founder and CEO of Fulfil, explains what it takes to successfully scale globally. He shares insights on when to transition from simple systems to more robust solutions, how to manage multi-entity operations, and the importance of balancing business complexity with effective technology infrastructure. Topics discussed in this episode: Why scaling internationally is harder. How returns management becomes critical. What determines if a market is worth it. Why multiple legal entities become necessary. How to recognize when spreadsheets limit growth. Why multi-warehouse inventory creates visibility issues. What makes multi-channel selling complex. How open APIs outperform traditional ERPs. Why real-time financial visibility matters. What implementation approach prevents ERP failure. Links & Resources Website: https://www.fulfil.io/ LinkedIn: https://www.linkedin.com/company/fulfil-io/ LinkedIn: https://www.linkedin.com/in/sharoonthomas/ X/Twitter: https://x.com/Sharoonthomas Get access to more free resources by visiting the show notes athttps://tinyurl.com/46ur2mejSUPPORT OUR SPONSORTry Brevo for free or use code ECB for 50% off Starter & Business Plans (first 3 months, annual plan).