POPULARITY
Categories
On this episode of That Tech Pod, Laura and Kevin sit down with Alexander Patrushev, Head of Product for AI/ML at Nebius, a European cloud platform focused on machine learning infrastructure. Kicking things off, we unpack the buzz around China's fully AI-powered “Agent Hospital,” raising questions about what role AI should play in medicine. Laura also shares a personal rant about navigating the healthcare system in search of real answers.Then, Alex joins from Luxembourg to explain what Nebius does, who it's built for, and how it helps companies tackle ML workloads. He breaks down the common mistakes teams make when launching ML projects and why success depends more on people and processes than just tech. The conversation also goes into whether companies should host their own LLMs or use pay-per-token APIs, and how to approach that decision. Looking ahead, Alex challenges the idea that AI is inherently hard and shares what businesses should really be focusing on, from smarter software to evolving hardware needs, as AI infrastructure continues to grow. It's a thoughtful, practical look at the future of AI from someone who builds the tools to power it.Alexander Patrushev is an experienced IT leader with over 15 years in the industry, including the past six focused on artificial intelligence. He currently serves as Head of Product for AI/ML at Nebius, a European cloud platform designed for building and deploying machine learning workloads. Based in Luxembourg, Alexander is known for his practical approach to solving real-world challenges faced by AI practitioners. He's especially focused on delivering user-centric, innovative solutions, and believes strongly in the importance of in-house R&D to drive product excellence and stay ahead in a fast-moving space.
AI agents hold the promise of continuously testing, scanning, and fixing code for security vulnerabilities, but we're still progressing toward that vision. Startups like Aptori are helping bridge the gap by building AI-powered security engineers for enterprises. Aptori maps an organization's codebase, APIs, and cloud infrastructure in real time to understand data flows and authorization logic, allowing it to detect and eventually remediate security issues. At Google Cloud Next, Aptori CEO Sumeet Singh discussed how earlier tools merely alerted developers to issues—often overwhelming them—but newer models like Gemini 2.5 Flash and Claude Sonnet 4 are improving automated code fixes, making them more practical. Singh and co-founder Travis Newhouse previously built AppFormix, which automated OpenStack cloud operations before being acquired by Juniper Networks. Their experiences with slow release cycles due to security bottlenecks inspired Aptori's focus. While the goal is autonomous agents, Singh emphasizes the need for transparency and deterministic elements in AI tools to ensure trust and reliability in enterprise security workflows.Learn more from The New Stack about the latest insights in AI application security: AI Is Changing Cybersecurity Fast and Most Analysts Aren't ReadyAI Security Agents Combat AI-Generated Code RisksDevelopers Are Embracing AI To Streamline Threat Detection and Stay AheadJoin our community of newsletter subscribers to stay on top of the news and at the top of your game.
Your data is moving—through APIs, AI agents, and services—and most businesses have no idea how. Abhi Sharma, CEO and Co-Founder of Relyance AI, joins us to explain how companies are getting AI governance wrong and what to fix. He reveals the 3 elements that define trust in AI—and why missing just one breaks everything. Abhi: https://www.linkedin.com/in/abhisharmab/ Relyance AI: https://www.relyance.ai Jon: www.linkedin.com/in/jon-mclachlan Sasha: www.linkedin.com/in/aliaksandr-sinkevich YSecurity: www.ysecurity.io
In this discussion, Cristina sits down with Faria Anzum, Developer Experience Product Design Lead at Canva, to explore her approach to SaaS integrations, developer experience, as well as the impact of AI on building scalable partner ecosystems.Faria's Role and Canva's Ecosystem ApproachFaria leads developer experience within Canva's ecosystem team, focusing on optimizing the end-to-end journey for developers—from discovery and documentation to app submission and launch. Her work spans both external developers and internal teams, ensuring feedback loops that drive continuous improvement in tooling and processes.Building for Developers: Key UX ConsiderationsFaria highlights the importance of systems thinking in developer experience, noting that every design decision impacts multiple stages of the developer journey.Unique challenges include blending Canva's established design system with the distinct UIs of external apps, ensuring a seamless and intuitive experience for users.Developer tools must minimize cognitive load and context switching, so Canva strives for consistency across documentation, tooling, and theming to reduce friction for developers moving between environments.Best Practices for Scalable IntegrationsCanva empowers partners to build at scale by providing robust building blocks: app templates, design patterns, and a comprehensive Figma UI kit. This approach streamlines development and ensures consistency in user experience.The team collaborates closely with partners through workshops and design reviews, fostering high-quality integrations and reducing surprises during app submission.Smaller partners particularly benefit from these resources, as they can rely on Canva's design guidance without needing in-house expertise.AI's Transformative Role in Developer WorkflowsAI is lowering barriers to entry, democratizing software development much like Canva did for design. Tools like ChatGPT and Cursor enable even non-coders to build functional integrations using natural language prompts.Canva recently launched Dev MCP server, for Canva apps and integrations, leveraging documentation and starter templates to accelerate development.While Canva can't always distinguish how much of an app is AI-generated, the focus remains on functionality and quality, not the origin of the code.Looking Ahead: Trust, Transparency, and the Future of AI in IntegrationsFaria emphasizes the need for transparency in AI-driven apps—clearly communicating what AI does, how data is used, and allowing users to override AI suggestions to build trust.She predicts a future where AI agents handle more of the integration lifecycle, spinning up apps from natural language descriptions, while human developers refine and innovate at the edges.The conversation closes with a call to embrace these changes, as AI and automation free up developers to focus on more creative and high-impact work.Key TakeawaysCanva's approach to developer experience centers on holistic design, strong building blocks, and close collaboration with partners.AI is fundamentally changing how integrations are built, making development more accessible and efficient.Trust, transparency, and adaptability will be crucial as AI-driven workflows become the norm in SaaS ecosystems.For more insights on tech partnerships, integrations, and APIs, listeners are encouraged to visit Pandium's blog and resources.https://www.pandium.com/blog
Topics covered in this episode: Making PyPI's test suite 81% faster People aren't talking enough about how most of OpenAI's tech stack runs on Python PyCon Talks on YouTube Optimizing Python Import Performance Extras Joke Watch on YouTube About the show Sponsored by Digital Ocean: pythonbytes.fm/digitalocean-gen-ai Use code DO4BYTES and get $200 in free credit Connect with the hosts Michael: @mkennedy@fosstodon.org / @mkennedy.codes (bsky) Brian: @brianokken@fosstodon.org / @brianokken.bsky.social Show: @pythonbytes@fosstodon.org / @pythonbytes.fm (bsky) Join us on YouTube at pythonbytes.fm/live to be part of the audience. Usually Monday at 10am PT. Older video versions available there too. Finally, if you want an artisanal, hand-crafted digest of every week of the show notes in email form? Add your name and email to our friends of the show list, we'll never share it. Brian #1: Making PyPI's test suite 81% faster Alexis Challande The PyPI backend is a project called Warehouse It's tested with pytest, and it's a large project, thousands of tests. Steps for speedup Parallelizing test execution with pytest-xdist 67% time reduction --numprocesses=auto allows for using all cores DB isolation - cool example of how to config postgress to give each test worker it's on db They used pytest-sugar to help with visualization, as xdist defaults to quite terse output Use Python 3.12's sys.monitoring to speed up coverage instrumentation 53% time reduction Nice example of using COVERAGE_CORE=sysmon Optimize test discovery Always use testpaths Sped up collection time. 66% reduction (collection was 10% of time) Not a huge savings, but it's 1 line of config Eliminate unnecessary imports Use python -X importtime Examine dependencies not used in testing. Their example: ddtrace A tool they use in production, but it also has a couple pytest plugins included Those plugins caused ddtrace to get imported Using -p:no ddtrace turns off the plugin bits Notes from Brian: I often get questions about if pytest is useful for large projects. Short answer: Yes! Longer answer: But you'll probably want to speed it up I need to extend this article with a general purpose “speeding up pytest” post or series. -p:no can also be used to turn off any plugin, even builtin ones. Examples include nice to have developer focused pytest plugins that may not be necessary in CI CI reporting plugins that aren't needed by devs running tests locally Michael #2: People aren't talking enough about how most of OpenAI's tech stack runs on Python Original article: Building, launching, and scaling ChatGPT Images Tech stack: The technology choices behind the product are surprisingly simple; dare I say, pragmatic! Python: most of the product's code is written in this language. FastAPI: the Python framework used for building APIs quickly, using standard Python type hints. As the name suggests, FastAPI's strength is that it takes less effort to create functional, production-ready APIs to be consumed by other services. C: for parts of the code that need to be highly optimized, the team uses the lower-level C programming language Temporal: used for asynchronous workflows and operations inside OpenAI. Temporal is a neat workflow solution that makes multi-step workflows reliable even when individual steps crash, without much effort by developers. It's particularly useful for longer-running workflows like image generation at scale Michael #3: PyCon Talks on YouTube Some talks that jumped out to me: Keynote by Cory Doctorow 503 days working full-time on FOSS: lessons learned Going From Notebooks to Scalable Systems And my Talk Python conversation around it. (edited episode pending) Unlearning SQL The Most Bizarre Software Bugs in History The PyArrow revolution in Pandas And my Talk Python episode about it. What they don't tell you about building a JIT compiler for CPython And my Talk Python conversation around it (edited episode pending) Design Pressure: The Invisible Hand That Shapes Your Code Marimo: A Notebook that "Compiles" Python for Reproducibility and Reusability And my Talk Python episode about it. GPU Programming in Pure Python And my Talk Python conversation around it (edited episode pending) Scaling the Mountain: A Framework for Tackling Large-Scale Tech Debt Brian #4: Optimizing Python Import Performance Mostly pay attention to #'s 1-3 This is related to speeding up a test suite, speeding up necessary imports. Finding what's slow Use python -X importtime
Ericc Whetstone joins the pod to talk about the importance of understanding what APIs can do for your contact center, use cases of great API development, and how important it is to have the skill set of API development available to a contact center staff. APIs are no longer just for the IT department. The more you understand how an API can be used, the more productivity savings and budget relief will be available to you.
It's been 4 years since TypeScript schema validation library Zod released v3, but the new v4 release makes it worth the wait. Expect faster parsing times across the board, built in error pretty-printing, and even a tree-shakeable API called Zod Mini for constrained environments like edge runtimes.There's a new npm-based CLI tool for managing and sharing AI rules across different editors and tools called vibe-rules. In addition to saving favorite prompts so they can be applied to any supported editor, vibe-rules can also automatically install prompts shared in a project's NPM packages into an editor's configuration. It's early days yet, but a great idea to make prompts easier for anyone to use.Angular v20 is out with some much anticipated highlights. Stabilized signal-based APIs, incremental hydration, custom Angular reporting directly in Chrome DevTools, GenAI development advancements, and, last but not least, a RFC for an official Angular mascot. Not to bias you, but we favor the pink, dice-shaped mascot around here.In this episode:1:10 - Zod v45:50 - vibe-rules15:12 - Angular 2027:03 - Remix v331:32 - Stack Overflow's Annual Dev Survey38:02 - Firefox and Temporal39:15 - Bolt's hackathon statusNews:Paige - Zod v4Jack - vibe-rulesTJ - Angular 20Lightning News:Remix v3 updatesFirefox is the first browser to support Temporal (Temporal on MDN)StackOverflow's Annual Dev Survey is out nowBolt's hackathon startsWhat Makes Us Happy this Week:Paige - Annual Gloucestershire cheese rolling race and Wiki historyJack - The Portland Pickles baseball gameTJ - StoryGraph and The God of the WoodsThanks as always to our sponsor, the Blue Collar Coder channel on YouTube. You can join us in our Discord channel, explore our website and reach us via email, or talk to us on X, Bluesky, or YouTube.Front-end Fire websiteBlue Collar Coder on YouTubeBlue Collar Coder on DiscordReach out via emailTweet at us on X @front_end_fireFollow us on Bluesky @front-end-fire.comSubscribe to our YouTube channel @Front-EndFirePodcast
For most of us, a fax is just a way to get a document from one place to another. But Shawn Freligh, Senior Vice President & General Manager at Upland Software, recognizes that faxes contain important information that automation can inject into health care sites' workflows. In this video, Freligh explains why faxing is still crucial to health care (and other industries) and how Upland Software uses AI and APIs in "making faxes more intelligent."Upland Software's InterFAX service, which has been providing fax service for decades, has employed common AI technologies such as OCR for a long time. Now, their new InterFAX+AI service bundles many common forms of intelligence useful to health care systems. It's no longer just transferring a document. It's now creating a smart workflow that saves healthcare organizations time and money.Learn more about Upland InterFAX: https://uplandsoftware.com/interfaxHealth IT Community: https://www.healthcareittoday.com/
Neste podcast explora-se o conceito de agentes de IA, definindo-os como componentes de software autónomos que atuam em nome de utilizadores ou sistemas para realizar tarefas. Discutem como os avanços em modelos de IA generativa permitiram que os agentes planeiem, colaborem e aprendam. As fontes identificam vários tipos de agentes, incluindo copilotos individuais, plataformas de automação de fluxo de trabalho e trabalhadores virtuais. Além disso, explicam como os agentes funcionam utilizando um ciclo de planeamento e execução de tarefas, e como utilizam ferramentas (como APIs e acesso a dados) para interagir com sistemas externos. As fontes também abordam a relação entre agentes e modelos de linguagem grandes (LLMs), o potencial impacto nos negócios através da automatização de processos e da modernização de infraestruturas de TI, e os desafios na adoção, como a confiança e a gestão da mudança. Saber mais aqui.
All images and links can be found on CISO Series. Check out this post by Gautam ‘Gotham' Sharma of AccessCyber for the discussion that is the basis of our conversation on this week's episode, co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Steve Zalewski. Joining us is Krista Arndt, associate CISO, St. Luke's University Health Network. In this episode: Verify then trust Dishonesty on all sides A lack of flexibility What about integrity? Huge thanks to our sponsor, Formal Formal secures humans, AI agent's access to MCP servers, infrastructure, and data stores by monitoring and controlling data flows in real time. Using a protocol-aware reverse proxy, Formal enforces least-privilege access to sensitive data and APIs, ensuring AI behavior stays predictable and secure. Visit joinformal.com to learn more or schedule a demo.
With AccessKit, Matt Campbell and Arnold Loubriat took on the ambitious task of abstracting over the accessibility APIs of several target OS' to offer toolkit providers one unified way to make their UIs accessible across platforms. This interview was recorded live at RustWeek 2025 with your host Luuk van der Duim. Contributing to Rustacean Station Rustacean Station is a community project; get in touch with us if you'd like to suggest an idea for an episode or offer your services as a host or audio editor! Twitter: @rustaceanfm Discord: Rustacean Station Github: @rustacean-station Email: hello@rustacean-station.org Timestamps & referenced resources [@1:11] - Introducing Matt and Arnold. [@1:45] - “What are you working on?” [@2:00] - “What does it offer?” [@2:28] - “Who would use AccessKit?” [@2:51] - AccessKit bindings in languages besides Rust. [@3:14] - Unifying accessibility protocols. [@4:47] - AccessKit's API. [@6:58] - AccessKit tree concepts. [@8:47] - When Arnold got involved. [@9:08] - 6000 lines of code to find Matt. [@12:56] - Matt's history with Windows and Microsoft. [@14:00] - How Quorum relates to AccessKit, Quorum [@15:52] - Challenges Quorum UI development faced. [@18:12] - Arnold and Matt on the necessity for back-end testing, Android, iOS - Linux. [@21:45] - On Newton and its Chromium relation. Newton [@27:55] - Newton on other compositers. [@29:20] - Wayland protocol purists versus Gnome D-Bus frictions. “Next-generation accessibility architecture” document [@31:03] - Where can people find Arnold? Arnold on GitHub as ‘DataTriny' Arnold Loubriat on LinkedIn DataTriny on Mastodon [@31:39] Where can people find Matt? Matt Campbell on GitHub AccessKit website. [@31:53] Your host can be found on GitHub. Luuk van der Duim Odilia screen reader atspi crate Credits Intro Theme: Aerocity Audio Editing: Luuk van der Duim Samples used in interruption: “Vinyl - 45RPM - Start 2” by: day-garwood License: Attribution 3.0 Record Scratch #3 by: musicvision31 License: Creative Commons 0 Hosting Infrastructure: Jon Gjengset Show Notes: Luuk van der Duim Hosts: Luuk van der Duim
Console Connect VP of Professional Services and Technology, Divesh Gupta, explores how automation, open APIs, and AI are reshaping enterprise connectivity with tools like the LSO Adaptor Tool—enabling real-time, on-demand services without intermediaries. Can these innovations deliver standardized, scalable, and secure services across global networks? In this Executives at the Edge episode, host Pascal Menezes... Read More The post Plug-and-Play Network Integration: Adapting to Open Connectivity appeared first on MEF.
SANS Internet Stormcenter Daily Network/Cyber Security and Information Security Stormcast
SSH authorized_keys File One of the most common techniques used by many bots is to add rogue keys to the authorized_keys file, implementing an SSH backdoor. Managing these files and detecting unauthorized changes is not hard and should be done if you operate Unix systems. https://isc.sans.edu/diary/Securing%20Your%20SSH%20authorized_keys%20File/31986 REMOTE COMMAND EXECUTION ON SMARTBEDDED METEOBRIDGE (CVE-2025-4008) Weatherstation software Meteobridge suffers from an easily exploitable unauthenticated remote code execution vulnerability https://www.onekey.com/resource/security-advisory-remote-command-execution-on-smartbedded-meteobridge-cve-2025-4008 https://forum.meteohub.de/viewtopic.php?t=18687 Manageengine ADAuditPlus SQL Injection Zoho patched two SQL Injection vulnerabilities in its ManageEngine ADAuditPlus product https://www.manageengine.com/products/active-directory-audit/cve-2025-41407.html https://www.manageengine.com/products/active-directory-audit/cve-2025-36527.html Dero Miner Infects Containers through Docker API Kaspersky found yet another botnet infecting docker containers to spread crypto coin miners. The initial access happens via exposed docker APIs. https://securelist.com/dero-miner-infects-containers-through-docker-api/116546/
In this episode, we hear from Janikiram MSV, an industry analyst and advisor based in Hyderabad, India, who specializes in AI agents and cloud native technology. We spoke about the evolution of AI agents, from chatbots to personalized AI assistants, and their advancement to AI agents that can access data, utilize APIs, and perform tasks autonomously. The discussion also covers the impact of these technologies on various fields, especially for developers, through examples like app modernization and AI-driven tools. We address important considerations such as authentication, authorization, and the future role of junior developers in an AI-augmented world. This episode sheds light on how AI agents can significantly transform workflow efficiency across multiple domains. 00:00 Introduction 00:56 Evolution of AI Agents 06:10 Impact on Developers and IT Operations 07:17 Authentication and Authorization Challenges 09:41 Future of AI in Development 20:19 Advice for Junior Developers 22:23 Conclusion and Future Discussions Guest: Janakiram MSV is an an industry analyst, strategic advisor, and a practicing architect. Through his speaking, writing, and analysis, he helps businesses take advantage of emerging technologies.
In this episode of Corporate Treasury 101, we sit down with Philip Costa Hibberd and Jan-Willem Attevelt from Automation Boutique to explore how Robotic Process Automation (RPA) and Artificial Intelligence (AI) are transforming treasury and finance teams. From eliminating manual workflows to building scalable automation ecosystems, Philip and Jan-Willem explain how modern tech can unlock efficiency and empower treasury teams to focus on value-driving activities. Whether you're new to automation or considering a rollout in your organization, this is a treasury-forward deep dive worth tuning into.Philip Costa Hibberd is the founder of Automation Boutique and a seasoned automation manager specializing in finance and treasury. Jan-Willem Attevelt is a technical expert in RPA, APIs, and AI, and brings extensive treasury experience to his work. Together, they help global organizations streamline operations through practical, no-nonsense automation strategies.What You'll Learn in This EpisodeWhat RPA is and how it fits into broader treasury automation effortsWhy attended vs unattended bots matter—and where AI fits into the mixPractical use cases: from FX rate retrieval to multi-bank PDF parsingWhy RPA is “macros on steroids”—and what it can do that Excel can'tThe risks of automating broken processes and why simplicity winsEpisode Breakdown & Timestamps [00:00] – Introduction and AFP partnership ($100 off CTP certification) [01:29] – Meet Philip and Jan-Willem from Automation Boutique [03:02] – What is automation in Treasury, and why does it matter [06:02] – What is RPA and how it works in a Treasury context [08:04] – Security, attended vs unattended bots, and credential handling [11:25] – How RPA and AI can work together in automation flows [15:23] – Simple RPA use case: extracting data from PDF confirmations [19:52] – Why RPA isn't always the best solution – when to say no [24:17] – RPA vs Excel macros: key differences and advantages [30:22] – How bots interact with applications and system UIs [36:05] – Is RPA suitable for small businesses? Cost and scalability [39:40] – Using Excel and Power Query as a starting point for automation [43:48] – Skills needed to start with RPA (free training and tools) [46:53] – How to maintain RPA implementations without deep tech skills [51:19] – Drawbacks of RPA: automating messy processes creates bigger problems [54:41] – Common Treasury RPA use cases: reporting & master data uploads [56:51] – Real success story: automating bank deal confirmation processing [01:09:13] – Future of Treasury: combining RPA with AI for decision-making [01:10:51] – Where to learn more: UiPath, Microsoft, and Automation BoutiqueFollow Philip Costa Hibberd & Jan-Willem AtteveltWebsite: https://www.automationboutique.com/Philip Costa Hibberd on LinkedIn: https://www.linkedin.com/in/philip-costa-hibberd/ Jan-Willem Attevelt on Linkedin: https://www.linkedin.com/in/attevelt/ Follow Corporate Treasury 101:Website:
This week we're joined by Nate Moran, Senior Director of Growth, Digital Strategy & Analytics at Edgewell Personal Care—the company behind brands like Schick, Banana Boat, Wet Ones, and more. With a career spanning Red Bull, Newell, Unilever, and now Edgewell, Nate brings a sharp perspective on what it takes to turn data into decisions and insights into impact.In this conversation, Nate and host Dave Feinleib explore the evolving relationship between analytics, creative, performance marketing, and AI. They dig into how Nate and his team think about data strategy, omnichannel planning, and the question on every marketer's mind: where should we spend the next dollar?If you're navigating retail media, e-commerce, or digital growth today, this episode offers a smart, candid look at the challenges—and opportunities—of scaling modern brand performance.Key Takeaways & Episode HighlightsWhy profitability, performance, and category management need to work together in an omnichannel world—and how Edgewell ties these functions across the business.What “the next best dollar” means at Edgewell, and how the team balances incrementality, ROAS, and long-term brand health.Lessons from managing 30,000+ SKUs at Amazon (before APIs made it easy) and how those scrappy skills still apply today.The role of a clear, focused data strategy—and why owning your data is critical for AI readiness and true self-serve analytics.How AI and generative tools like ChatGPT and Snowflake are reshaping workflows, and why agentic AI might be the real unlock for the future.Why creative still matters: performance spend alone won't build trust or brand love—and how to balance emotional storytelling with analytics-driven media.Rapid Rundown QuestionsFavorite Edgewell product: Jack Black Dual Defense SPF MoisturizerBrand that's nailing it creatively: Liquid DeathGo-to tech tools: ChatGPT and SnowflakeFavorite read/listen: The Long and the Short of It by Les Binet and Peter FieldFavorite way to recharge: Mountain biking and snowboarding in Bend, OregonConnect with Nate: https://www.linkedin.com/in/nathanmoran/Get the It'sRapid Creative Automation Playbook: https://itsrapid.ai/creative-workflow-automation-playbook/Take It'sRapid's Creative Workflow Automation with AI survey: https://www.proprofs.com/survey/t/?title=ffgvdEmail us at sales@rapidads.io with code “BEYOND2025” to find out how you can save more than $1,000 on our Digital Sell Sheets and Retail Media Automation solutionsTheme music: "Happy" by Mixaud - https://mixaund.bandcamp.comProducer: Jake Musiker
In this interview, two health care interoperability leaders make a strong case for the value of the FHIR Business Alliance. We hear about FHIR as a path toward interoperability from Duncan Weatherston, Chief Executive Officer at Smile Digital Health and FHIR Business Alliance Chairperson, and Mario Hyland, Senior Vice President and Founder of AEGIS.net, Inc. and FHIR Business Alliance Board Member and Membership Committee.The Fast Healthcare Interoperable Resources (FHIR) standard, adopted several years ago by HL7, solves data sharing problems through well-defined, vendor-independent APIs, which are the modern approach to interoperability. Although FHIR is fully established and supported by nonprofit organizations, its implementation has been hampered up to now by lack of a strong business focus. The FHIR Business Alliance is bringing companies together to address that.Learn more about FHIR Business Alliance: https://www.fhirball.org/Health IT Community: https://www.healthcareittoday.com/
In this episode of CISO Tradecraft, host G Mark Hardy delves into the emerging concept of Model Context Protocol (MCP) and its significance in AI and enterprise security. Launched by Anthropic in November 2024, MCP is designed to standardize how AI systems interact with external data sources and applications. Hardy explores how MCP differs from traditional APIs, its implications for security, and the steps organizations need to take to prepare for its adoption. Key topics include the stateful nature of MCP, security risks such as prompt injection and tool poisoning, and the importance of developing a robust governance framework. By the end of the episode, listeners will have a comprehensive understanding of MCP and practical recommendations for safeguarding their AI-driven workflows. Transcripts https://docs.google.com/document/d/1vyfFJgTbsH73CcQhtBBkOfDoTrJYqzl_ References Model Context Protocol specification and security best practices, https://modelcontextprotocol.io Security risks of MCP, https://pillar.security MCP security considerations, https://writer.com Chapters 00:00 Introduction to Model Context Protocol (MCP) 00:27 Understanding MCP and Its Importance 01:41 How MCP Works and Its Security Implications 04:23 Comparing MCP to Traditional APIs 08:41 MCP Architecture and Security Benefits 12:07 Top Security Risks of MCP 18:00 Implementing Security Controls for MCP 25:00 Governance Framework for MCP 28:03 Future Trends and Strategic Recommendations 30:34 Conclusion and Next Steps
API security has evolved from being primarily an infrastructure issue to a complex challenge centered around language and design flaws. Jeremy Snyder, CEO of Firetail, discusses the findings from their latest state of API security report, emphasizing the alarming rise of indirect prompt injection as a significant threat in AI-integrated systems. As APIs underpin much of modern application architecture, understanding how they function and the potential vulnerabilities they present is crucial for organizations aiming to protect themselves from increasingly sophisticated attacks.Snyder highlights the shared responsibility model in API security, where both developers and security teams must collaborate to ensure robust protection. While infrastructure teams manage the basic security measures, developers are responsible for the design and logic of the APIs they create. This evolving understanding of security responsibilities is essential as threat actors become more adept at exploiting API vulnerabilities, particularly through authorization failures, which continue to be a leading cause of breaches.The conversation also delves into the distinction between authentication and authorization, illustrating how both are critical to API security. Authentication verifies a user's identity, while authorization determines what actions that user can perform. Snyder emphasizes that many organizations still struggle with authorization issues, which can lead to significant security risks if not properly managed. The report reveals that the time to resolve security incidents remains alarmingly high, while the time for attackers to exploit vulnerabilities has drastically decreased, raising concerns about the effectiveness of current security measures.As AI technologies become more integrated into applications, the potential for indirect prompt injection attacks increases, necessitating a reevaluation of security practices. Snyder advises organizations to focus on secure design principles and maintain visibility over AI usage within their systems. By implementing governance frameworks and monitoring tools, organizations can better manage the risks associated with shadow AI and ensure that their API security measures are both effective and comprehensive. All our Sponsors: https://businessof.tech/sponsors/ Do you want the show on your podcast app or the written versions of the stories? Subscribe to the Business of Tech: https://www.businessof.tech/subscribe/Looking for a link from the stories? The entire script of the show, with links to articles, are posted in each story on https://www.businessof.tech/ Support the show on Patreon: https://patreon.com/mspradio/ Want to be a guest on Business of Tech: Daily 10-Minute IT Services Insights? Send Dave Sobel a message on PodMatch, here: https://www.podmatch.com/hostdetailpreview/businessoftech Want our stuff? Cool Merch? Wear “Why Do We Care?” - Visit https://mspradio.myspreadshop.com Follow us on:LinkedIn: https://www.linkedin.com/company/28908079/YouTube: https://youtube.com/mspradio/Facebook: https://www.facebook.com/mspradionews/Instagram: https://www.instagram.com/mspradio/TikTok: https://www.tiktok.com/@businessoftechBluesky: https://bsky.app/profile/businessof.tech
In this episode of our InfoSecurity Europe 2024 On Location coverage, Marco Ciappelli and Sean Martin sit down with Professor Peter Garraghan, Chair in Computer Science at Lancaster University and co-founder of the AI security startup Mindgard. Peter shares a grounded view of the current AI moment—one where attention-grabbing capabilities often distract from fundamental truths about software security.At the heart of the discussion is the question: Can my AI be hacked? Peter's answer is a firm “yes”—but not for the reasons most might expect. He explains that AI is still software, and the risks it introduces are extensions of those we've seen for decades. The real difference lies not in the nature of the threats, but in how these new interfaces behave and how we, as humans, interact with them. Natural language interfaces, in particular, make it easier to introduce confusion and harder to contain behaviors, especially when people overestimate the intelligence of the systems.Peter highlights that prompt injection, model poisoning, and opaque logic flows are not entirely new challenges. They mirror known classes of vulnerabilities like SQL injection or insecure APIs—only now they come wrapped in the hype of generative AI. He encourages teams to reframe the conversation: replace the word “AI” with “software” and see how the risk profile becomes more recognizable and manageable.A key takeaway is that the issue isn't just technical. Many organizations are integrating AI capabilities without understanding what they're introducing. As Peter puts it, “You're plugging in software filled with features you don't need, which makes your risk modeling much harder.” Guardrails are often mistaken for full protections, and foundational practices in application development and threat modeling are being sidelined by excitement and speed to market.Peter's upcoming session at InfoSecurity Europe—Can My AI Be Hacked?—aims to bring this discussion to life with real-world attack examples, systems-level analysis, and a practical call to action: retool, retrain, and reframe your approach to AI security. Whether you're in development, operations, or governance, this session promises perspective that cuts through the noise and anchors your strategy in reality.___________Guest: Peter Garraghan, Professor in Computer Science at Lancaster University, Fellow of the UK Engineering Physical Sciences and Research Council (EPSRC), and CEO & CTO of Mindgard | https://www.linkedin.com/in/pgarraghan/ Hosts:Sean Martin, Co-Founder at ITSPmagazine | Website: https://www.seanmartin.comMarco Ciappelli, Co-Founder at ITSPmagazine | Website: https://www.marcociappelli.com___________Episode SponsorsThreatLocker: https://itspm.ag/threatlocker-r974___________ResourcesPeter's Session: https://www.infosecurityeurope.com/en-gb/conference-programme/session-details.4355.239479.can-my-ai-be-hacked.htmlLearn more and catch more stories from Infosecurity Europe 2025 London coverage: https://www.itspmagazine.com/infosec25Catch all of our event coverage: https://www.itspmagazine.com/technology-and-cybersecurity-conference-coverageWant to tell your Brand Story Briefing as part of our event coverage? Learn More
New episode with my good friends Sholto Douglas & Trenton Bricken. Sholto focuses on scaling RL and Trenton researches mechanistic interpretability, both at Anthropic.We talk through what's changed in the last year of AI research; the new RL regime and how far it can scale; how to trace a model's thoughts; and how countries, workers, and students should prepare for AGI.See you next year for v3. Here's last year's episode, btw. Enjoy!Watch on YouTube; listen on Apple Podcasts or Spotify.----------SPONSORS* WorkOS ensures that AI companies like OpenAI and Anthropic don't have to spend engineering time building enterprise features like access controls or SSO. It's not that they don't need these features; it's just that WorkOS gives them battle-tested APIs that they can use for auth, provisioning, and more. Start building today at workos.com.* Scale is building the infrastructure for safer, smarter AI. Scale's Data Foundry gives major AI labs access to high-quality data to fuel post-training, while their public leaderboards help assess model capabilities. They also just released Scale Evaluation, a new tool that diagnoses model limitations. If you're an AI researcher or engineer, learn how Scale can help you push the frontier at scale.com/dwarkesh.* Lighthouse is THE fastest immigration solution for the technology industry. They specialize in expert visas like the O-1A and EB-1A, and they've already helped companies like Cursor, Notion, and Replit navigate U.S. immigration. Explore which visa is right for you at lighthousehq.com/ref/Dwarkesh.To sponsor a future episode, visit dwarkesh.com/advertise.----------TIMESTAMPS(00:00:00) – How far can RL scale?(00:16:27) – Is continual learning a key bottleneck?(00:31:59) – Model self-awareness(00:50:32) – Taste and slop(01:00:51) – How soon to fully autonomous agents?(01:15:17) – Neuralese(01:18:55) – Inference compute will bottleneck AGI(01:23:01) – DeepSeek algorithmic improvements(01:37:42) – Why are LLMs ‘baby AGI' but not AlphaZero?(01:45:38) – Mech interp(01:56:15) – How countries should prepare for AGI(02:10:26) – Automating white collar work(02:15:35) – Advice for students Get full access to Dwarkesh Podcast at www.dwarkesh.com/subscribe
Gravitee, a platform designed to help companies manage their APIs and other digital traffic pipelines, has raised $60 million in a Series C funding round led by Sixth Street Growth with participation from Riverside Acceleration Capital and Albion VC. Learn more about your ad choices. Visit podcastchoices.com/adchoices
There comes a point when the adage "there's an app for that" becomes too on-the-nose.Enterprises need to be able to manage numerous networking and security applications from multiple vendors, but balancing multiple APIs and licenses across those applications creates complexity, Nabil Bukhari, CTO of Extreme Networks, told Light Reading at the company's Extreme Connect event in Paris this week.During this podcast, Bukhari explains the challenges enterprises face in networking and security application management and how the use of AI can simplify network automation and connectivity. But, AI should be used for more than just automating tasks, it should also automate business outcomes, he adds. That could mean "automating the entire process your [networking and security] teams would do anyway" by using AI to troubleshoot problems, remediate issues and catalogue the steps AI took to solve the issue, he says. Hosted on Acast. See acast.com/privacy for more information.
In a wine retail landscape where most businesses are flat or declining, Benchmark Wine Group continues to post steady growth — reaching $45 million in revenue in 2024, up more than 12% from $40 million a year prior. And they're tracking to break that record in 2025! So how are they doing it?! Benchmark is more than a high-end wine shop. Under the leadership of CEO/Owner David Parker, the company has evolved into a multi-pronged wine and spirits ecosystem, with a data and tech backbone that rivals Silicon Valley startups.Benchmark is setting a new standard for what a modern drinks retailer can look like, with operations spanning from BenchmarkWine.com, to Brentwood Auctions, Benchmark Wine & Spirits in Washington, D.C., Wine Spectrum in Napa, and a powerful technology division — First Growth Technologies, which powers Wine Market Journal and Spirits Market Journal.In this episode, David shares:How Benchmark's rare wine focus, data infrastructure, and high-touch customer service helped it thrive while others contractedWhy the company built five complementary businesses and how each arm — from tech to retail to auctions — supports the othersHow First Growth Technologies' data fuels pricing strategy, inventory decisions, and trade relationships in real timeWhy Benchmark's customer base is rapidly diversifying, with 30% of sales now coming from millennial collectors (!!)How the company sources inventory from well-documented private cellars, and what goes into its renowned “provenance guarantee”What's behind the rise in interest for rare spirits, and why Benchmark's D.C. location has become a critical growth engineHow automation, APIs, and AI-driven personalization are shaping the next phase of digital growth — and giving customers better tools to discover and collectWhy David says the company is constantly optimizing for efficiency, trust, and staying power in a complex regulatory and logistical environmentLast Call:This week, we're talking AI, automation, and a radically smarter sales funnel. Alexis Beechen, founder of agave wine brand Ola Sol, is reimagining drinks industry sales using tech tactics that feel more Silicon Valley than traditional beverage. She shares: How AI is helping qualify leads before her sales team walks in the door — with off-the-shelf tools that built a 51% email open rate and 10% meeting conversion. Don't miss our next episode, dropping on May 28.For the latest updates, follow us:Business of Drinks:LinkedInInstagram @bizofdrinksErica Duecy, co-host: Erica Duecy is founder and co-host of Business of Drinks and one of the drinks industry's most accomplished digital and content strategists. She runs the consultancy and advisory arm of Business of Drinks and has built publishing and marketing programs for Drizly, VinePair, SevenFifty, and other hospitality and drinks tech companies.LinkedInInstagram @ericaduecyScott Rosenbaum, co-host: Scott Rosenbaum is co-host of Business of Drinks and a veteran strategist and analyst with deep experience building drinks portfolios. He currently serves as Head of Search at Distill Ventures. He was formerly the Vice President of T. Edward Wines & Spirits, a New York-based importer and distributor.LinkedInCaroline Lamb, contributor: Caroline is a producer and on-air contributor at Business of Drinks and a key account sales and marketing specialist at AHD Vintners, a Michigan-based importer and distributor.LinkedInInstagram @borkalineSPONSOR: SWIG Partners is exclusively offering $100 off their supplier-distributor matchmaking fee when you mention the Business of Drinks podcast, or inquire via this link: https://www.swigpartners.com/businessofdrinksIf you enjoyed today's conversation, follow Business of Drinks wherever you're listening, and don't forget to rate and review us. Your support helps us reach new listeners passionate about the drinks industry. Thank you!
The 16:9 PODCAST IS SPONSORED BY SCREENFEED – DIGITAL SIGNAGE CONTENT Digichief has been helping digital signage and DOOH network operators feed the so-called content beast for a bunch of years. While the Kentucky-based company started up in 2007, its roots go back another decade to a tech start-up that did similar graphics-driven content work for broadcast TV. I've known co-founder Gene Hamm forever, but this podcast was the first time we had a detailed chat about what Digichief does and offers. We get into a bunch of things, including what's widely used and what seems like perfect contextual content, but hasn't caught on. We talk in detail, as well, about more customized content, and about a new service called Mercury that Digichief spent more than a year developing and recently rolled out. If you hear thumping sounds in the background on my end, that's the roofers. It wasn't until the morning we recorded this that I remembered about the racket they'd be making. Big job. Big bill. Subscribe from wherever you pick up new podcasts. TRANSCRIPT Gene Hamm, thank you for joining me. For those people who don't know much about Digichief, could you gimme the elevator pitch on what you guys do? Gene Hamm: Absolutely. Thanks Dave. Long-time listener, first-time caller. Am I the first one to say that? Probably not, among the first. Gene Hamm: My kids always say I've got a lot of dad jokes, so I oh, no, I won't bore with that. But thanks for having me today. I'm Gene Hamm, one of the founders of Digichief. In a nutshell we're a content solutions provider. Basically, a one-source solution for all things content. We work in a number of capacities. We have a white labeled solution for data feeds for those clients who want to control the designs themselves. Or we can provide an integrated solution with HTML5, our widgets for clients that don't want to do the heavy lifting on the design. We already have it baked into our APIs, and so we've built up a library of content over the years. All the staples, weather news, sports info, that sort of thing. We also have some short-form, video series, and some other products that we work as distribution partners, with digital art, things like that. But in a nutshell, we aggregate, we curate, and we create content for you, and we provide it in a consistent manner. We take care of the licensing, and we keep up with the inevitable changes in the source, data feeds, and put it out in a highly scalable, cloud infrastructure. So I would say in the early days or earlier days of digital signage, a lot of companies, I shouldn't say a lot because there weren't many, and there still aren't that many, but the companies that were doing the sort of work that you do, I would describe as aggregators that they were collecting and harmonizing data feeds from news gathering organizations, government organizations like National Weather Service and so on, and getting in a format that's structured, reliable and all those sorts of things so that CMS companies or end users could tap into your feeds and have something that's reliable, organized, and curated to some degree. Is that a fair way of describing things? Gene Hamm: That is a fair assessment, and I think it's evolved over time. I think early on, it was basically, just kind of an aggregation model. We actually started the company, it's an offshoot of another company we'd started back in the 90s where we worked in the broadcast television space, where we were doing lower third tickers, turnkey systems. So kinda like Chiron? Gene Hamm: Yeah, we were third-party developers for Chiron. So we worked a lot with Chiron early on, but a lot of the stuff you saw on the lower thirds and newscasts around the country was our stuff. The dreaded tickers. Gene Hamm: The dreaded tickers that kind of blew up in the 90s, yeah. We did news headlines, we were doing integrations with AP Weather. We actually ended up doing elections, school closings, and internet chat. We were all over the board on that. So that's how we got our feet wet on integrating and aggregating content. In the mid 2000s, we saw the digital signage kind of take off, and we said, look, we've already got these connections with these sources, so why don't we just license these and license this vertical? So that's kind of how it started, but it's evolved over time. We certainly still do that and provide those in a consistent format, but then it's also moved into kind of bespoke projects where people will say, we've got this data, we've got, we want this, maybe we have to go out and do research on specific topics for “Cold weather starting tips for Automotive Dealerships”, things like that. So there's really a research arm to it that we can go out and create stuff for custom projects. So if you had to give a percentage of from a third party versus what you guys are developing internally, what roughly would that be? Gene Hamm: I would say about 60 to 70% of it is aggregating. All the staples, traffic, transit, flight data, news headlines, sports scores, the stuff that people want to display most often. So yeah, I would say roughly 60 to 70% of it, and then the other stuff is, a lot of stuff on the infotainment route is data-based that we've created over time and this could be for like “This day in history” trivia, fun facts, jokes, clean jokes of the day, holidays, whimsical, eye-catching things to get eyeballs up on the screen. The challenge I've always seen with using third-party sources for things like tickers and full-screen presentations, whether it's from the AP, Canadian Press, or Reuters, is that they typically don't write headlines for digital signage or digital at home or anything else, and they don't even really do it in a lot of cases online. So what you end up with are headlines that don't really say anything. It'll say, “This week's top news is this…” and that'll show up on screens. I see it on broadcast still, and I'm going, why are you even using this? Why don't you curate stuff that you know has fully formed thoughts and says in a headline what you need to know versus kind of a teaser? Have you guys struggled with that, or has it gotten better? Gene Hamm: We've absolutely run into that. You're speaking to the choir here. We've knocked our head against the wall so many times, and I just think that for these news organizations, digital signage is an afterthought. Believe me, over the last 20 years, we've seen so many stories come out that we just scratch our heads, and I've had conversations with the editors to try to plead my case, and it just goes on deaf ears. So basically what we have to do with our news, we have two formats. We have one that's filtered, and we've got lookups and intelligence written in where if something comes out misformed or certain key phrases, we just kick them out. And then we have basically a curated version where we actually go in and manually approve and post. We look at the image, we look at the images is another problem with it, but we look at the story, and we say, this doesn't make sense, or maybe we change a few words around to make it flow better and fit into a kind of concise title and description. So yeah, it's been a big problem and honestly it hasn't gotten any better in my viewpoint. Does AI present an opportunity to clean things up? Because I will take the odd story that I write and dump it into Claude and just say, “Give me 10 suggested headlines” and it'll knock out ten headline headlines in 15 seconds, and I'll look at it and go, oh, that one's pretty good and I'll take that one and maybe massage it a little bit. But it does a pretty good job with that sort of thing. Gene Hamm: It absolutely will be a tool that we can utilize, and we're certainly looking into it right now to try to inject on our backend tools that you can request a specific, character-limited title that makes sense. One of the nuances to AI, which I know you're aware of, is that it's all in the phrasing of how you ask the question for the format that you wanted back in. Prompt engineering. Gene Hamm: Yeah. It's an art in itself, and what we see is that we think that AI can help this curation service to look at the headlines that we're getting and spit them out in more of a usable, readable, concise form. But it's not gonna be autonomous anytime soon. Gene Hamm: We'll see. Yeah, not reliably autonomous, it's still gonna give you some weird headlines and all that, but then again, you could hire somebody and they'll give you weird headlines. Gene Hamm: That's true. That's absolutely true. We try to say that our Soft News, which is our curated version, and we try to bill it as G-rated content that's not going to tick somebody off, but that's next to impossible these days because whatever you think is G-rated and is not going to satisfy everyone. We try to stay away from the political end of it, but there's always gonna be somebody that's offended. Yeah. I've talked to a few people who just said, you know what, we don't even do politics on our feeds anymore, or what we show on our screens, because somebody's gonna be irritated, somebody's gonna complain, and it's just not worth it. Gene Hamm: Oh, the stories I can tell. It's funny. We have a custom bad word filter for stuff that we don't want to come across in the AP and so we've built that over time, and I could never let that see the light of day that the things that we've seen come across the wire that we now omit. Even the images as well. There are a lot of times we'll get images that don't really explain the story, it doesn't make sense, maybe they aren't centered on the right focal point of the image, and we think maybe AI could definitely benefit, maybe being able to zone in on what the main cue is of the image that we get with the AP stories or any of the news images. Have the demands and the uses, usage trends evolved through the years, like when I got into digital, more than 25 years ago now, there weren't really even smartphones, and the internet was still fairly new-ish, and you could have public screens in elevators or walkways or shopping malls or whatever that were running news and weather on there, and those would be a primary source for that information, you fast forward to now, and you can't get away from news, you can't get away from weather data, that sort of thing. I've always wondered, do those things need to be on screens anymore? Gene Hamm: That's definitely a good debatable topic. There are so many of these black screens in our hands that fight for attention. We work in the automotive space in dealer showrooms and you walk into the showroom there and people are in the waiting area, and they've got screens up with content on it, news headlines, weather, things like that, and everybody is looking at their phone. So you're always thinking how do we compete with getting eyeballs up on the screen to get the messaging and whatnot for the client, as opposed to the ubiquitous news headlines and things like that. So yeah, it's something that our clients definitely have to deal with. Is that something you coach to, to tell both your resellers and your end users, that it's important to really think through what you're using in terms of content feeds or your content mix so that it's hyper relevant and contextual to where you are versus just “We need stuff to run on this lower third” or “We need stuff to run in between our dealer promotional messages” or whatever it may be, whatever the venue is. Gene Hamm: Absolutely. As you said, it's all in the content mix. If you're trying to get eyeballs up there on the screen, you gotta have relevant hyper-local content, whether that be local traffic maps or local sports scores or things like that for the market. But yeah, the dwell time and how long the content is on the screen, you want to get the eyeballs up there and then move on to what your marketing message is. So it's definitely a delicate balance between, you can't just inundate someone with all the news, all weather. You definitely have to make it in short, concise forms because people's attention spans go elsewhere. They go back to their phone or something else. A few months ago, you announced a partnership with a company called Stream, and I've done a podcast with those folks and laid out what they do and all that. How do you work with them, and could you kinda run down what they do and how that's resonating with your user base? Gene Hamm: Yeah, so we met Anthony Nerantzis at one of the trade shows, and he came by and explained his interest. He's kind of a broadcaster, newsroom journalist. So basically, what it is they do is a presenter-led, concise, short-form video of bespoke custom news, right? And it can be catered to the industry. So if it's medical, financial, or automotive, or what have you. They can go back, write the scripts, and of course, Anthony can describe this company better than I can, so hopefully he's not gonna be mad at me for giving this kind of dissertation. But yeah, I just thought it brought to the table something that we could really customize for our clients, and it's very professional, the workflow is great, you can provide some of the background, what you know the company's looking to do, what type of information they're trying to get across, their team can go back and write a script that's engaging and they can automate the product to put it out on whatever the interval you need, whether it be weekly or monthly. Originally, when they came out, it was a closed caption type thing with lower third supers on the bottom of the screen and I had mentioned to them, “Hey, there are too many graphics on the screen. Maybe, you might wanna streamline that a little bit.” They did that because they're very good about taking feedback, and now they've moved in. It was more of a no-volume type environment product, and now they've, they're able to do audio voiceover as well from the on-air talent actually speaking and you can actually hear it. Now they're getting into kind of the marketing communication end of it where, let's say it's a pharmaceutical company or something that wants to talk about things that like the president or the CEO wants to talk about certain things to their employees that they have going on, his team's able to go out and produce that and deliver that information and they can get eyeballs up on the screen, educate and inform the client. It's been very well received and we're also looking to work with them on some of our feeds, whether it's health-related type content, maybe we can work in some of the real, day-to-day, hyper-local information on the tail end of the video segment. Say if it's a medical facility and they're talking about medical health tips, things like that, maybe it comes in and we can integrate with one of our APIs and follow the levels of the flu levels there are for the specific area, so we can really hyper-localize it. So in a lot of respects, it's a variation on the sort of work that you've been doing, particularly on the custom side of it. But instead of it just being text and visuals, they can do a full video with on-air talent and they do that by green screening, on-air hosts, and then mashing that up with AI so that it's a human talking to you and doing a custom presentation as opposed to an anime avatar look that I think looks ghastly in most cases? Gene Hamm: Absolutely. I think going to the presenter-led approach is advantageous and some of the early ones, like you said, that we've seen are just creepy. But I think what they're doing with their technology is amazing. I think it looks spot on. Yeah, I've looked at it a couple of times for extended periods, just paying attention to see if it's glitchy at all, and it's very smooth, and if you didn't know, you'd be hard pressed to know, this is AI-generated, but it's absolutely human. But the movements and lips and all that stuff are being massaged through AI. Gene Hamm: Yeah, and the neat thing about it, too, is just it's so scalable and they can automate it, and they can really like its bespoke content, so they can create the script, have it produce it in very short order. So more recently, you've announced something else called Mercury. Can you walk through what that is? Gene Hamm: Mercury was created basically to give our users a more robust way to onboard our HTML content. We were getting requests for more of a web portal that gives more granular design choices such as colors, backgrounds, logos, the transitions. They can go in and micromanage the news they wanna see, or the sports they want to see, the duration that it's on the screen, and then, they can compile that into a playlist and then output it to a URL and that URL can be scheduled. It's quite a long time coming. We certainly had HTML55 widgets before, but this just gives people a little bit more granular decisions and a web portal, and then we also thought it was a good way to showcase our widget library. We built up these designs over time. Many of the products that we have, there's multiple designs, and so for, we think it might be a growth area for new prospects, that it lowers the barrier of entry to go out and actually, sign up for a free trial, take a look at, it's an all you can eat type model where we've got all the staples, the news, the weather, the sports, the stocks, the infotainment and we're adding new designs and widgets all the time. I think it's intuitive where we spent well over a year designing the system, and I think it really gives people a way to sample our products and see how it works with their systems. Could you give an example of how a typical client would use it and what they do? Gene Hamm: Yeah, so they sign up for the product. It's a subscription service, with volume discounts that they can go in, and we've got a kind of smorgasbord of content, a widget library and it's all categorized by, like I said, news, weather, things like that, and they can pick and choose what content they wanna build into a playlist? Now that could be just a single piece of content, whether, say, weather, and they've got a bunch of different designs, whether they wanna do a 5K five-day forecast, if they wanna do a full-screen weather map, they can choose their locations, and then they can output it as a URL that URL can be a plugged into a playlist and that pluglist can have their content or they can massage their own local content, through their own platform, so it just gives them the ability to do this kind of infotainment type stuff in between their other messaging. But yeah, they can build a playlist with a single asset, or they can build a playlist with 30 and build a longer duration, say, a 20-minute loop if they want. So yeah, that's the typical workflow. So more normally or in the past, if I were a corporate entity and I had a corporate campus in three cities in South Carolina. If I were buying that from a typical subscription content service or weather provider, it's going to have a certain look and color schemes, everything else, and you can't really deviate from that, versus with Mercury, you can choose your fonts, choose your background, colors, everything else, and tweak it so it fits the way you want, maybe has the company's corporate colors and or just fits in with the overall look of the network. Is that a clear way of saying this? Gene Hamm: Yeah. To make it very granular, the layout of, let's say, a five-day forecast, the data itself is set on the screen, but all the other elements around it like if they wanted to upload their own. company logo, if they wanna match their corporate colors, they can choose certain fonts that may match what you know they're using. So yeah, they can make different transitions to it, so they can really make granular choices with it to fall in line with what they're looking for, but be on the same thing across the same board. We have stocks, if they wanna put their own company stock up there, they can do that. If they wanna do infotainment like trivia or whatnot, we have a number of different trivia categories that they can choose. So yeah, they can really hyper-localize. Do you put guardrails in terms of design choices that can be made? Like thinking particularly of font choices and Lord knows we've all seen online, particularly, and less so on digital signage, here somebody decides I'm going to use this font, and it's just the wrong choice. Gene Hamm: We have chosen a list of fonts that we have in a dropdown box that they can choose from. As you can imagine, this was our initial decision when we debuted this release system a few months ago, and our thought is that we wanna give them these options to an extent, right? So we have several fonts that we think we deem look good, and we certainly can add additional fonts as we go. But yes, I agree there's some god awful fonts up there that we don't think would at the end of the day look great on particular design. Is this the way to deal with the demand that can scale up so that if you were just doing this through managed services, where you would have companies come to you and say, “Hey, we would like a live custom feed that presents ou weather and other information in these fonts, this background and everything else.” That's hard to do and hard to charge because if it's a one-off, you gotta charge a lot more for it, versus a service where you log in and you do it yourself, by and large, that makes it possible to do more. Gene Hamm: Yeah, I think so. I think with the pricing model, how we have it, they can use everything. It's all you can eat, in terms of all these different designs and content categories that they can go in and it's not gonna cost them anymore if they put the news or the weather up there. I think the value proposition to Mercury is that we're doing the heavy lifting on the backend, and that these local networks don't have to go out and find different sources, and like you mentioned, the National Weather Service. Early on, we were integrating with the National Weather Service and that got to be just an overwhelming task because of stages and formats, and changes in the designs and things like that. It just made more sense for us to go out and get an aggregated list. Actually, we have a couple of different aggregated services. So, like a lot of our staples, we have a primary source and a backup source. So if one goes inevitably, these sources have issues, and if one goes down. It really streamlines the whole process. Has the whole business of getting data from different sources improved? Have they started to, or maybe not started, but long since understood that you can't keep changing the structure. You've gotta stick to something. Gene Hamm: Yes and no. With sports specifically, they're good about giving us a heads up when things are gonna change. In the olden days, we would find out about it after it happened. So I think a lot of the source APIs that we have do a good job of giving us kind of a change. But there's repercussions. If they do a full change of their structure, we have to integrate that, and if it has any changes to how we do content, we have to let our clients know, and we have to make sure the widgets are changed. We have to make sure they know that the structure's changed. During the pandemic, we really moved our cloud infrastructure from one cloud service to another. We added a lot of data points to our structure, and so that was really an uphill battle in terms of having to communicate to our current client base that had already done the design work and had already integrated with our APIs to let them know that's coming. So we don't take these things lightly and we've communicated to our sources over time about the repercussions to this. You can't just pull the trigger and give us a two-week notice. What about social media? If I go back 10-15 years, there were a lot of subscription content providers and CMS companies developing widgets so that you could display Twitter (now X) or Facebook post or whatever maybe on screens and I think over time people realize, oh boy, that's a dangerous thing to do unless you've got somebody sitting right on top of it all the time. Gene Hamm: It's absolutely the case. In fact, we were one of the ones early on that were doing native integrations with the APIs from Twitter and Facebook and whatnot, and it got to be a full-time job for our developers, changing not only the licensing, but the structure, and we finally threw in the towel on it and outsourced it to a company where that's all they do, and so we work with this particular company, and they take care of it. They've got a team of developers that don't do anything else, and they keep up on all the backend changes, the licensing, and so we're able to not only provide Facebook, Instagram, Twitter or X, LinkedIn, all this as a concise data feed with different data points and assets, and then we also have an HTML version that integrates with it. So yeah, we've definitely gone the route of outsourcing that to someone who could keep up with it. Is there a most popular resource and one that you thought would have traction and that just never worked out, and you've since dropped or rarely see sold? Gene Hamm: About a year ago, we started with a health API, so seasonal and patient level data, and by seasonal, we mean pollen which is a big one and we have multiple sources for that. But, RSV levels, COVID-19 numbers, cold and cough, and flu. And then we can even get granular with patients. We can go and say a zip code in the United States, and say, what are the ten highest levels of obesity? And they can customize a message or an ad campaign towards that. Those particular zip codes we thought would take off at least the patient-level stuff and it was just really slow out of the gate. We've had a lot of interest and we've made a lot of presentations, but I think there are a lot of these companies that are still trying to figure out how they might use it. Flight data is one that we work with, and we have some clients using it. There are certain sources that are very expensive to keep up with. That's something that we thought would be selling more than it does. A lot of times, the people that you know that put the flight data up are probably going directly to the source as opposed to going through somebody like us. Is there one that everybody uses, or almost everybody? Gene Hamm: Everybody uses weather, of course, that's the big one. Everybody uses sports scores, and everybody uses news. That's news, weather, sports are the big dogs. Just a couple of final questions. Where are you guys based, and how big is your company? I'm thinking you don't have that big of a headcount because you don't need to, because you're using external resources. Gene Hamm: Yeah, so we're based in Lexington, Kentucky. We also have partners spread across the world. But I got a partner in California. There are a few of us here, and then we've got a couple in Ukraine. So we've been working with a couple of developers who are now employees in Ukraine, well before the war. So it's been interesting seeing that side of it from an employee. It gives you a perspective on a drone flying over, and bombings and things like that. So there are five of us. We run a small operation, but like you said, we don't really need an extensive team. We certainly have worked with or contracted out some design work in terms of the graphical design. We've worked with the same designers for well over a decade. All right, so thank you. If people wanna find out more, it's just Digichief.com, right? Gene Hamm: Yeah, Digichief.com, and then if someone wants to sample Mercury for a free trial, there's a Mercury link on there that they can go and sign up for, and give it a whirl. Gene, thank you. Gene Hamm: Thank you, Dave. I appreciate your time.
CTO and co-founder of Apollo, Matt DeBergalis, joins us on this episode to talk about how GraphQL has continued to evolve over time, and how Apollo is focused on making it more accessible for developers and AI agents than ever before.For those less familiar with Apollo and GraphQL, Matt shares the history of both, including lessons he learned from founding the company Meteor that helped him while building Apollo.We discuss how even though GraphQL is making less headlines than it was a few years ago, it's really begun to find its niche within larger organizations that have hundreds or even thousands of APIs and databases underpinning their many applications, and how Apollo has continued to evolve so that it can support APIs, serverless functions, and SQL- or no SQL-databases, with little extra code needed to make these different data sources work together.Matt also highlights the benefits of a GraphQL schema for AI agents and MCP servers, sharing how the agents are generally very good at parsing the schemas and understanding how to leverage queries against the interface to retrieve the data they need. While we've had tech stacks in the past like LAMP and MERN, this new addition of AI to the development mix provides a unique opportunity to redefine the stack once more, and GraphQL could be a very good piece to include.Special GuestMatt DeBergalis, CTO and co-founder of ApolloRelevant Links:Apollo GraphQL websiteApollo GraphQL YouTubeApollo GraphQL LinkedInApollo GraphQL on XMatt on GitHubMatt on XMatt on MediumMatt on LinkedInWhat Makes Us Happy this Week:Paige - The Pitt TV seriesTJ - I Think I Was MurderedMatt - Teaching my daughter to ride a bikeThanks as always to our sponsor, the Blue Collar Coder channel on YouTube. You can join us in our Discord channel, explore our website and reach us via email, or talk to us on X, Bluesky, or YouTube.Front-end Fire websiteBlue Collar Coder on YouTubeBlue Collar Coder on DiscordReach out via emailTweet at us on X @front_end_fireFollow us on Bluesky @front-end-fire.comSubscribe to our YouTube channel @Front-EndFirePodcast
In this episode of Maintainable, Robby speaks with Joe Masilotti, an independent consultant who helps Rails teams ship mobile apps using Hotwire Native.Joe shares his perspective on what makes software maintainable—especially for consultants who need to onboard quickly. He explains why setup scripts often add unnecessary complexity, and how he evaluates a project's maintainability by how quickly he can go from clone to coding.Robby and Joe also discuss how hybrid mobile development can offer faster delivery, fewer bugs, and better long-term flexibility—especially when teams reuse their existing Rails web views. Joe explains how Hotwire Native allows teams to incrementally introduce native features without rewriting their entire app.Whether you're maintaining a mobile shell built two years ago or just starting to explore native development, Joe offers actionable advice on setting expectations, scoping client work, and navigating modern mobile tech stacks.⏱️ Episode Highlights[00:01:17] Onboarding as a Measure of MaintainabilityJoe shares how quickly he can spin up a Rails app often reflects how maintainable it is.[00:05:12] Being a Good Guest in Someone Else's CodebaseJoe outlines his ideal onboarding checklist and how he adapts to unfamiliar environments.[00:08:00] Setting Communication and Collaboration ExpectationsThe three questions Joe asks every client to understand how their team works.[00:13:02] Offering Opinions—Only Where InvitedWhy Joe stays scoped to the work he's hired for, even when tempted to fix more.[00:14:15] When Technical Debt Enters the ConversationJoe explains how debt discussions usually emerge after version one is shipped.[00:15:33] Who Should Read Hotwire Native for Rails DevelopersJoe describes the type of developer his book is written for and what it covers.[00:18:01] Choosing Native vs. Hybrid for Your Rails AppA framework comparison based on your current frontend architecture.[00:20:00] Introducing the Hotwire Native MindsetWhy logic belongs on the server and the client should stay thin.[00:21:00] Bridge Components: How Rails, iOS, and Android ConnectJoe walks through how native and web technologies pass data between layers.[00:24:00] Why Even a Web View-Based App is Worth ShippingThe practical benefits of discoverability, push notifications, and native APIs.[00:28:01] Replacing Unmaintainable Apps with Hotwire NativeJoe describes how hybrid rewrites often reduce mobile code by 90%.[00:31:33] Letting Go of Feature ParityWhy most clients end up cutting features they originally wanted to preserve.[00:32:18] Scoping and Estimating Project-Based WorkHow Joe uses repeatable patterns to price fixed-fee consulting engagements.[00:35:15] Using AI to Translate Between Tech StacksJoe shares how he leverages LLMs to explore unfamiliar languages like Kotlin.[00:42:26] Long-Term Maintainability and When to Touch the CodeWhy some apps don't need changes for years—and that's okay.[00:43:43] Why Hybrid Apps Are Easier to ReplaceJoe explains why hybrid apps are often more disposable and less risky than monolithic web apps.
KeywordsBitcoin, open source, decentralization, mining, APIs, UTX Oracle, firmware, Bitcoin price, self-sovereignty, hardwareSummaryThis conversation delves into the significance of open source in Bitcoin mining, emphasizing its role in decentralization and innovation. The speakers discuss various open source projects aimed at improving mining efficiency, the challenges posed by current mining firmware, and the potential of the UTX Oracle in providing a crowdsourced Bitcoin price. They also explore the future of open source in Bitcoin mining hardware, highlighting the need for greater control and transparency in the mining process.TakeawaysBitcoin is a combination of many innovative ideas.Open source is crucial for the decentralization of Bitcoin.Bitcoin mining must also be open source to remain decentralized.PyASIC simplifies monitoring for Bitcoin miners.The UTX Oracle offers a more reliable Bitcoin price.Current mining firmware is poorly designed and limits control.Greater control over mining operations can enhance profitability.Crowdsourcing Bitcoin price through UTX Oracle is revolutionary.Self-sovereignty in Bitcoin mining is essential.Open source hardware faces significant challenges but is possible.Chapters00:00 Decentralizing Bitcoin Mining: An Introduction01:50 The Importance of Open Source in Bitcoin04:55 Innovative Tools for Bitcoin Miners08:06 Challenges with Current Mining Firmware10:52 Curtailment and Control in Mining Operations13:49 The Role of UTX Oracle in Bitcoin Pricing16:44 Crowdsourcing Bitcoin Price Data20:06 The Future of Open Source Hardware in Bitcoin Mining22:56 Community Engagement and Open Source Contributions
Meet Jared Siebert, Owner and Developer of Vintools, a company revolutionizing winery eCommerce through smart integrations and streamlined marketing solutions. Jared combines deep web development expertise with a passion for solving real-world challenges in the wine industry. Here's a glimpse of what you'll learn: Learn about Vintools' offerings and their expertise with Commerce7 and WineDirect Explore the journey from customizable website templates to API-driven email marketing solutions Explore practical tips for integrating tools into winery campaigns Discover how Vintools' referral engine boosts customer referrals and amplifies word-of-mouth sales Understand the role of client feedback in driving new integrations Get a peek into how AI tools are shaping code development In this episode with Jared Siebert Join us for a deep dive into the intersection of wine, tech, and marketing. In today's episode of Legends Behind the Craft, Drew Thomas Hendricks chats with Jared Siebert, the founder of Vintools, about how modern APIs, integrations, and thoughtful design are helping wineries grow their online presence with less friction. Whether you're a tech-savvy winery or just starting your digital journey, this episode uncorks the tools and strategies that are reshaping how wine brands connect with customers. Sponsor for this episode… This episode is brought to you by Barrels Ahead. Barrels Ahead is a wine and craft marketing agency that propels organic growth by using a powerful combination of content development, Search Engine Optimization, and paid search. At Barrels Ahead, we know that your business is unique. That's why we work with you to create a one-of-a-kind marketing strategy that highlights your authenticity, tells your story, and makes your business stand out from your competitors. Our team at Barrels Ahead helps you leverage your knowledge so you can enjoy the results and revenue your business deserves. So, what are you waiting for? Unlock your results today! To learn more, visit barrelsahead.com or email us at hello@barrelsahead.com to schedule a strategy call.
In a world where anyone can list a website for sale, Empire Flippers accepts only 5% of submissions. Why?Because their marketplace has become the gold standard for serious buyers.Every listing undergoes rigorous verification through APIs, financial checks, and seller background screening.In this interview, CEO Andy Allaway shares what's really happening in today's market.And what separates million-dollar website listings from the rest, including a rare look at a 20-year-old news site generating $60K monthly that passed their strict vetting process.Plus, Andy answers the big question: Is it still worth buying or selling online businesses in 2025?Whether you're looking to buy your first website or sell your 7-figure e-com brand, this interview is packed with value.Listen now to get the inside scoop on what's really happening in the online business marketplace in 2025.Connect with Andy on LinkedIn: https://www.linkedin.com/in/andyallaway/Want To Learn How To Buy Websites for Income and Financial Independence?You don't need tech skills or prior experience—just the right strategy. Learn how complete beginners are buying profitable online businesses (without the risk of getting scammed or overpaying): https://www.ebusinessinstitute.com.au/dip
In this episode of Between Product and Partnerships, we sit down with Indy Sen, Product Marketing Manager for Ecosystem at Canva, to explore what it really takes to build a thriving SaaS platform and developer ecosystem.Indy shares hard-earned lessons from his career shaping ecosystems at Salesforce, Box, MuleSoft, Google, and now Canva. From launching on the early Salesforce AppExchange to scaling developer engagement at global companies, Indy dives into what's changed (and what hasn't) when it comes to partnerships, platform strategy, and developer marketing.By the way, Indy is running the London Marathon and raising funds for cancer research. Support the cause here:https://secure.acsevents.org/site/STR?fr_id=109250&pg=personal&px=59788306--To access more resources and content on technology partnerships, integrations, and APIs, check out our blog and resources page belowBlog: https://www.pandium.com/blogTech Partnerships & Product Management Resources: https://www.pandium.com/resource-center
In this episode of Between Product and Partnerships, Cristina Flaschen sat down with Shrijit Patel, Technical Product Manager at Chronograph, to talk about building integration infrastructure, developing anti-fragile systems, and bridging the technical gap as a backend-focused PM. Drawing from his experience at Accenture, FIS, Amazon, and now Chronograph, Shrijit broke down what most PMs miss when thinking about integrations and backend product strategy.--To access more resources and content on technology partnerships, integrations, and APIs, check out our blog and resources page belowBlog: https://www.pandium.com/blogTech Partnerships & Product Management Resources: https://www.pandium.com/resource-center
本期节目我们和《二分电台》的主播 2BAB 探讨了移动应用开发领域的技术趋势。AB 详细介绍了原生与非原生开发的区别,以及 Flutter、ReactNative 和 Kotlin Multiplatform (KMP) 等跨平台框架的特点。嘉宾们还分析了各种技术选型的优劣,例如 ReactNative 的热更新优势和 Flutter 的 UI 一致性,以及 Kotlin 作为 Android 官方语言的崛起。最后,节目还探讨了 On-Device 模型在移动设备上的应用前景,例如图像语义搜索和离线推理,并对 AI 技术在移动开发领域的潜在影响进行了展望。 嘉宾 2BAB (AB) 主播 laike9m Manjusaka 章节 00:14 移动端开发框架介绍与原生/非原生定义 07:03 ReactNative 的兴起、问题与 Flutter 的挑战 14:19 Kotlin Multiplatform (KMP) 与 Jetpack Compose 的发展 23:22 KMP 的流行度、ReactNative 的价值与未来发展 30:05 Electron 的妥协与热更新的重要性 37:43 入门移动端开发的建议与 Flutter 的未来 42:57 Flutter 的风险与 Kotlin 的竞争 48:45 On-Device Model 的应用与发展 55:10 On-Device Model 的功耗与应用场景 1:03:08 On-Device Model 的隐私与安全 1:10:03 总结与推荐 链接 React Native Flutter Kotlin Programming Language Jetpack Compose Kotlin Multiplatform (KMP) Compose Multiplatform (CMP) SkiaSkia is an open source 2D graphics library which provides common APIs that work across a variety of hardware and software platforms. It serves as the graphics engine for Google Chrome and ChromeOS, Android, Flutter, and many other products. The Truth About React Native - YouTube google/XNNPACK: High-efficiency floating-point neural network inference operators for mobile, server, and Web React Native Panel hosted by Jamon Holmgren - Chiara Mooney, Eli White, Keith Kurak, Chris Traganos - YouTube Gemini Nano litert-community/Gemma3-1B-IT · Hugging Face OpenAIDoc | 开发者友好的文档中心,一站式解决您的技术文档需求 《mono 女孩》
Is REST alive and well? Or is it time to move on?Kin Lane (aka the “API Evangelist”) joins this episode of Gartner's Steering Engineering Podcast to explore these topics and answer the question: What does “good” actually mean when it comes to APIs?About the GuestKin Lane describes himself as an “API Evangelist,” with a long history of building and consulting on APIs and API strategy.
In this episode, we're bringing you a curated selection of conversations from the KubeCon EU 2025 showfloor. We'll be diving into the rise of platform engineering, exploring some cutting-edge technologies, getting updates on core Kubernetes components, and hearing some truly unique user stories, like using Kubernetes on a dairy farm! Do you have something cool to share? Some questions? Let us know: - web: kubernetespodcast.com - mail: kubernetespodcast@google.com - twitter: @kubernetespod - bluesky: @kubernetespodcast.com News of the week CNCF Blog - Announcing the Automated Governance Maturity Model Kubernetes Blog CNCF Blog - Understanding Kubernetes Gateway API: A Modern Approach to Traffic Management Open Observability Summit Links from the interview NAIS at NAV, with Hans Kristian Flaatten and Audun Fauchald Strand Audun Fauchald Strand Hans Kristian Flaatten NAV (Norwegian Labor and Welfare Administration) Kubernetes Podcast 216: NAIS, with Johnny Horvi and Frode Sundby NAIS KubeCon EU 2025 Keynote: Adventures of Building a Platform as a Service for the Government - Hans Kristian Flaatten, Lead Platform Engineer, NAV & Audun Fauchald Strand, Principal Software Engineer, NAV GKE release notes Platform Engineering, with Max Körbächer and Andreas (Andi) Grabner Max Körbächer Andreas (Andi) Grabner Book: “Platform Engineering for Architects: Crafting modern platforms as a product” by Max Körbächer, Andreas Grabner, and Hilliary Lipsig Cloud Native Summit Munich Kubernetes at LinkedIn, with Ahmet Alp Balkan and Ronak Nathani Ahmet Alp Balkan Ronak Nathani Kubernetes Podcast 249: Kubernetes at LinkedIn, with Ahmet Alp Balkan and Ronak Nathani Ahmet's Blog Introducing Multi-Cluster Orchestrator: Scale your Kubernetes workloads across regions LLMs on Kubernetes, with Mofi and Abdel KubeCon EU 2025 talk: Yes You Can Run LLMs on Kubernetes - Abdel Sghiouar & Mofi Rahman, Google Cloud About the Gateway API Gateway API Inference Extension Deploy GKE Inference Gateway SIG etcd with Ivan Valdes Ivan Valdes etcd.io SIG etcd on GitHub Open Source Kubernetes, with Jago Macleod Jago Macleod Google Open Source: Kubernetes Schedmd Slurm Ray Run:ai from Nvidia Medium blog: “Deploy Slurm on GKE” by Abdel Sghiouar AI-Hypercomputer, xpk XPK (Accelerated Processing Kit, pronounced x-p-k) is a command line interface that simplifies cluster creation and workload execution on Google Kubernetes Engine (GKE). XPK generates preconfigured, training-optimized clusters and allows easy workload scheduling without any Kubernetes expertise. Cursor AI Editor Dairy Farm Automation & Banking with Kubernetes, with Clément Nussbaumer Clément Nussbaumer Talos Linux Cluster-api Cluster API is a Kubernetes subproject focused on providing declarative APIs and tooling to simplify provisioning, upgrading, and operating multiple Kubernetes clusters. KubeCon EU 2025 Talk: “Day-2'000 - Migration From Kubeadm+Ansible To ClusterAPI+Talos: A Swiss Bank's Journey” - Clément Nussbaumer, PostFinance Kubeadm Kubeadm is a tool built to provide kubeadm init and kubeadm join as best-practice "fast paths" for creating Kubernetes clusters. Being a First-Time KubeCon Attendee, with Nick Taylor Kubernetes The Hard Way K3s - “The certified Kubernetes distribution built for IoT & Edge computing” Kubernetes Ingress Controllers Kubernetes Up and Running Kubernetes Docs KubeCon EU 2025 Sponsored Keynote: The Science of Winning: Oracle Red Bull Racing's Formula with Open Source, Kubernetes and AI - Sudha Raghavan, SVP of OCI Developer Platform, Oracle
In this episode, we dive into the bold moves reshaping the travel industry. Airbnb relaunches Experiences and debuts Services with a mission to create more human connection—think chefs, massages, and personal trainers on demand. Meanwhile, Expedia doubles down on B2B and AI, launching powerful new APIs and an intelligent travel agent to streamline discovery and booking. From emotional connection to seamless automation, we explore how two giants are redefining what it means to travel in 2025.Are you new and want to start your own hospitality business?Join our Facebook groupFollow Boostly and join the discussion:YouTube LinkedInFacebookWant to know more about us? Visit our websiteStay informed and ahead of the curve with the latest insights and analysis.
Esther Tech President, April Taylor, details the mounting pressure telecom providers face to streamline operations and cut costs. Now, AI, APIs, and blockchain are transforming intercarrier transactions, eliminating manual processes, reducing disputes, and enabling on-demand services. By how much can automation really accelerate payment? In this Executives at the Edge episode, host Pascal Menezes explores... Read More The post AI, APIs, and Blockchain: Accelerating Quote to Cash appeared first on MEF.
Google AI Overviews are expanding test markets in Europe to Turkey, Sweden, and the Netherlands in advance of Google I/O. Google launched a free Generative AI Certification training program with the actual certification exam costing $99US. Google introduced "Discussions" in beta. Discussions is meant to replace Reddit as a primary source of livetime AI training resources by encouraging search users to add comments and conversation about specific topics which can then be used throughout the Google ecosystem. AI training is even more important as Google continues to commit to an AI Everything stance. Meanwhile, Elon Musk's Grok has evolved from plucky truth-teller to insane drunken uncle over night with talk of genocides against white South Africans and questions about the validity of facts about the Holocaust. xAI suggests a rouge programmer is responsible however the chatbot's offensive rewriting of history continues at time of recording. Speaking of Grok, the Technology Transparency Project publicly flagged several X accounts as likely linked to US-sanctioned terrorist organizations. The group suggests terrorist groups are using Grok to write propaganda on their behalf. Furthermore, they suggest terrorist groups are using the X tip-button as a monetization tool. In other news, a Michigan State University researcher has linked belief in fake news stories to an emerging psychological issue called Problematic Social Media Use syndrome. In other news, Bing Search APIs are set to retire on August 11, 2025. The APIs will not be replaced however users are urged to consider Grounding with Bing Search as part of Azure AI Agents to incorporate realtime web data with generated LLM responses. We also learned that Google has been rethinking their search stack and are considering how fundamental components of search can be reimagined in a LLM environment. AIOverview links are all considered position 1 in Search console while 43% of AI Overview links point back to Google search results. All this and a lot more in a heavily Googlized edition.Support this podcast at — https://redcircle.com/webcology/donationsAdvertising Inquiries: https://redcircle.com/brandsPrivacy & Opt-Out: https://redcircle.com/privacy
In the second episode of our special series on recommendations to the Trump administration, Quality Matters host Andy Reynolds welcomes Ryan Howells, Principal at Leavitt Partners, for an illuminating discussion on transforming digital quality and data exchange..Ryan shares fresh ideas from the Leavitt Partners roadmap to reshape digital health infrastructure by embracing scalable, internet-based standards and dismantling policy barriers. At the core of this conversation is that effective data exchange must be powered not only by modern standards, but by trust among people and institutions. Ryan's suggestions include:· Implementing APIs at scale to reduce manual processes and administrative waste. The same APIs that power everyday apps can streamline data exchange between payers and providers, replacing faxes, phone calls and redundant forms.· Certifying data exchange—not just software functionality. Instead of dictating how systems are built, federal policy should focus on certifying APIs, allowing EHR vendors the flexibility to innovate while helping ensure that data flows freely.· Establishing “tables of trust.” Regional collaboration among payers, providers and government agencies can test new digital infrastructure in real-world settings and be the model for national expansion.Digital quality transformation will require more than just tech upgrades—we must rethink relationships, trust and policy levers. Listen to this episode to learn how the Trump administration could support a data-driven revolution in health care quality.Key Quote:“I've been doing this for a long time, almost 30 years. But when I go into my doctor's office and I still have to fill out a clipboard with a piece of paper on it with information I know they already have, it is painful. The best representation of whether we are making progress is, I don't want to ever go into a doctor's office and fill out a clipboard. If I could just not fill out my health history, my demographic information, whether information should be sent to my doctor—if all that is just in the doctor's system—I would say we have made progress. Because at that point it will be real to the individual. Think about it in terms of digitizing all of the health care data and making sure it is with the right person, at the right time, in the right place to make the right decisions. When that happens, we'll know we've made significant progress.” Ryan Howells Time Stamps:(02:27) Why Implementing Health Care APIs is Hard(05:32) Tables of Trust: A Case Study from Utah(07:03) Scaling Trust and Interoperability(13:12) Eliminating Manual Processes (18:23) Solving Diverse Use Cases (19:36) Encouraging Early Adoption of APIsLinks:NCQA Recommendations to the Trump Administration Leavitt Partners Recommendations: “Kill the Clipboard!”Connect with Ryan Howells
The Model Context Protocol, or MCP, is a new open standard that connects AI assistants to arbitrary data sources and tools, such as codebases, APIs, and content repositories. Instead of building bespoke integrations for each system, developers can use MCP to establish secure, scalable connections between AI models and the data they need. By standardizing The post Anthropic and the Model Context Protocol with David Soria Parra appeared first on Software Engineering Daily.
Episode SummaryJeremy Snyder is the co-founder and CEO of FireTail, a company that enables organizations to adopt AI safely without sacrificing speed or innovation. In this conversation, Jeremy shares his deep expertise in API and AI security, highlighting the second wave of cloud adoption and his pivotal experiences at AWS during key moments in its growth from startup onwards.Show NotesIn this episode of The Secure Developer, host Danny Allan sits down with Jeremy Snyder, the Co-founder and CEO of FireTail, to unravel the complexities of API security and explore its critical intersection with the burgeoning field of Artificial Intelligence. Jeremy brings a wealth of experience, tracing his journey from early days in computational linguistics and IT infrastructure, through a pivotal period at AWS during its startup phase, to eventually co-founding FireTail to address the escalating challenges in API security driven by modern, decoupled software architectures.The conversation dives deep into the common pitfalls and crucial best practices for securing APIs. Jeremy clearly distinguishes between authentication (verifying identity) and authorization (defining permissions), emphasizing that failures in authorization are a leading cause of API-related data breaches. He sheds light on vulnerabilities like Broken Object-Level Authorization (BOLA), explaining how seemingly innocuous practices like using sequential integer IDs can expose entire datasets if server-side checks are missed. The discussion also touches on the discoverability of backend APIs and the persistent challenges surrounding multi-factor authentication, including the human element in security weaknesses like SIM swapping.Looking at current trends, Jeremy shares insights from FireTail's ongoing research, including their annual "State of API Security" report, which has uncovered novel attack vectors such as attempts to deploy malware via API calls. A significant portion of the discussion focuses on the new frontier of AI security, where APIs serve as the primary conduit for interaction—and potential exploitation. Jeremy details how AI systems and LLM integrations introduce new risks, citing a real-world example of how a vulnerability in an AI's web crawler API could be leveraged for DDoS attacks. He speculates on the future evolution of APIs, suggesting that technologies like GraphQL might become more prevalent to accommodate the non-deterministic and data-hungry nature of AI agents. Despite the evolving threats, Jeremy concludes with an optimistic view, noting that the gap between business adoption of new technologies and security teams' responses is encouragingly shrinking, leading to more proactive and integrated security practices.LinksFireTailRapid7Snyk - The Developer Security Company Follow UsOur WebsiteOur LinkedIn
Scott and Wes break down the latest in JavaScript news, including new async patterns in Svelte, React Server Component tooling with Parcel, and Redwood's push into Cloudflare with its new SDK. They also cover what's new in Storybook 9 Beta, from visual testing to a sleeker, lighter build. Show Notes 00:00 Welcome to Syntax! 02:50 Brought to you by Sentry.io. 03:37 Syntax Meetup! 04:09 React View Transitions. 08:58 addTransitionType. 11:18 Activity API. Offscreen Renamed to Activity. 14:22 Maintaining state in search queries. 16:29 Asynchronous Svelte. Playground. 19:04 Svelte Boundary. 25:13 Parcel RSC. 27:15 Redwood SDK. 30:55 Storybook 9 Beta. Hit us up on Socials! Syntax: X Instagram Tiktok LinkedIn Threads Wes: X Instagram Tiktok LinkedIn Threads Scott: X Instagram Tiktok LinkedIn Threads Randy: X Instagram YouTube Threads
This episode's Community Champion Sponsor is Ossur. To learn more about their ‘Responsible for Tomorrow' Sustainability Campaign, and how you can get involved: CLICK HEREEpisode Overview: Healthcare's integration challenges have reached a critical juncture where clinicians demand seamless technology that enhances rather than hinders patient care. Our next guest, John Orosco, is revolutionizing this landscape as CEO of Red Rover Health. With over 25 years of healthcare IT experience, including his foundational role at Cerner developing their first API platform, John witnessed firsthand how rigid integration systems stifle innovation. This insight led him to co-found Red Rover Health, creating a normalized SaaS platform that serves as "the App Store for healthcare." By enabling true best-of-breed solutions through standardized APIs, John is breaking down the barriers that have long frustrated healthcare organizations. Join us to discover how Red Rover's pioneering approach is empowering providers to choose the tools they need while maintaining seamless EHR connectivity. Let's go!Episode Highlights:Healthcare's open integration platforms often get shut down when they threaten vendor sales of proprietary solutionsRed Rover Health serves as "the App Store for healthcare," enabling seamless third-party app integration with EHR systemsThe joke "if you've seen one HL7 interface, you've seen one" reflects how every integration requires custom codeHealthcare CIOs often function as "EMR administrators" rather than true technology innovatorsAI/ML represents the next frontier, with Red Rover positioning to enhance data access with AI-powered insightsAbout our Guest: John is a healthcare IT entrepreneur and expert in Electronic Health Record (EHR) integration with over 25 years of experience. He started as a software developer at Cerner Corporation, where he led the first Millennium RESTful integration team. John later founded JASE Health, providing custom EHR integrations for healthcare IT vendors, before co-founding Red Rover Health to develop a normalized SaaS platform for EHR integration. John is dedicated to solving complex EHR challenges and enabling healthcare providers to implement best-of-breed solutions regardless of their EHR system.Links Supporting This Episode: RedRover Health Website: CLICK HEREJohn Orosco LinkedIn page: CLICK HERERed Rover Health LinkedIn: CLICK HEREMike Biselli LinkedIn page: CLICK HEREMike Biselli Twitter page: CLICK HEREVisit our website: CLICK HERESubscribe to newsletter: CLICK HEREGuest nomination form: CLICK HERE
How do you bring structure to the chaos of service pricing? In this episode, Frank talks with Tracey Shirtcliff, founder of ScopeBetter, a "Services CPQ" platform helping creative agencies and consultancies ditch the spreadsheets and build scalable, repeatable pricing models. Tracey shares her journey from building Traffic Live to launching ScopeBetter, and why most of their competition is still Excel. You'll hear about: Why service pricing is messy — and how to fix it How AI and automation are reshaping the billable hour The role of integrations, open APIs, and their 12-week implementation model What it means to give teams pricing consistency across roles, regions, and workflows From SaaS innovation to outdoor adventure and biohacking, Tracey's passion for pushing limits comes through—don't miss this unique look into the future of services CPQ.
Sami talks with Tom Akehurst, Co-Founder of WireMock (https://www.wiremock.io/), about the delay and disconnect between front and back end development and how WireMock set out to bridge the two together. Tom explains how his time working for Disney paved the way for WireMock, the different processes of mocking and testing APIs, and provides some useful advice on how to improve your testing process as a whole. Sami also puts Tom's knowledge to the test as he seeks some feedback on a real world example he's been working on recently. — Interested in improving your testing and mocking process? Try out WireMock for free (https://www.wiremock.io/), and get to grips with what it has to offer through WireMock Cloud Academy (https://www.wiremock.io/academy). If you get stuck at any point you can join their Slack channel and ask the community for advice (https://wiremock-community.slack.com/join/shared_invite/zt-2vjv6lkhz-evIN6Vg6xhFOQ8GoSnGtmQ#/shared-invite/email)! Want to get in touch with Tom directly? You can contact him through LinkedIn (https://www.linkedin.com/in/tomakehurst/) or via email - tom@wiremock.org Your host for this episode has been Sami Birnbaum. Sami can be found through his website (https://samibirnbaum.com) or via LinkedIn (https://www.linkedin.com/in/samibirnbaum/). If you would like to support the show, head over to our GitHub page (https://github.com/sponsors/thoughtbot), or check out our website (https://podcast.thoughtbot.com). Got a question or comment about the show? Why not write to our hosts: hosts@giantrobots.fm This has been a thoughtbot (https://thoughtbot.com/) podcast. Stay up to date by following us on social media - LinkedIn (https://www.linkedin.com/company/150727/) - Mastodon (https://thoughtbot.social/@thoughtbot) - Bluesky (https://bsky.app/profile/thoughtbot.com) © 2025 thoughtbot, inc.
Our guest on this episode of Data Driven Finance is Jeff Cain, VP Fintech Research at Fidelity Investments. Before that he was Head of Partnerships at Brightside and spent eight years at Yodlee. Jeff got his Bachelor's Degree in Economics at Stanford and a Masters from Harvard. We're not really talking about Fidelity; we're going bigger picture and getting Jeff's personal take on wealth building and tech's role in that. Topics covered include: How customers can be segmented to track behaviors, demographics, and goals. Are behaviors driving technology or are tech innovations changing what consumers want? How are finserv businesses doing at keeping up with consumer demands and innovating around those? What are the big trends in financial consumer behavior? And likewise, what are the coming trends in fintech? When it comes to the third-party apps and players, what's going to separate the winners from the losers? Why should banks and financial institutions fully embrace APIs, data sharing, and open banking? What to look forward to and what to be cautious about as we move through 2025. Helpful Links: Fidelity Center for Applied Technology Jeff Cain on LI
The key to improving patient engagement lies in reducing friction and delivering rich communication experiences directly to the consumer. In this episode, Myron Wallace, Fractional Chief Product Officer at White Label Communications, discusses how his organization is simplifying healthcare communications through APIs that integrate telephony into SaaS solutions. He highlights the potential of Rich Communication Services (RCS) to enhance patient engagement by delivering interactive content directly within messages, reducing the need for separate applications. Myron also explores how organizations are using RCS for secure, branded messaging in areas like e-sign consent and patient education. While he acknowledges AI's potential, he warns against the hype and stresses the importance of regulatory oversight and reducing patient friction through practical technologies like RCS. Tune in and learn how RCS could transform patient communication and engagement. Resources: Connect with and follow Myron Wallace on LinkedIn. Learn more about White Label Communications on their LinkedIn and website. Discover more about Myron on his website.
On this episode of the Scouting For Growth podcast, Sabine VdL talks to Sara Simeone, an award-winning entrepreneur behind NoCodeLab.ai, the First Vibe Coding Launchpad that helps non-technical dreamers ship AI-powered products in just five weeks—no keyboard sorcery required. Whether you’re a Gen Z founder sketching ideas on a dorm whiteboard, an investor scouting the next scalable platform, or a corporate leader hunting for fresh growth engines, Sara’s story is your front-row seat to how Vibe Coding is about to change the way we build. KEY TAKEAWAYS Vibe coding is defined as creating something using your natural language and vibe with the code to try to understand how the product in front of you is changing as you add more prompts/features. It’s an evolution of the drag-and-drop of no-code platforms but allows you to express yourself in a clear, specific and tangible way to translate visions into products. When I stepped into the startup founder world, I realised that there was a very big problem: There are a lot of subject matter experts who had a lot of dreams, but they couldn’t make these into tangible products. A lot of accelerator programmes only teach you how to launch a product rather than create one because they take for granted that you have a technical co-founder or you can create it yourself, this excludes non-technical founders from a big portion of the entrepreneurial world. Founders don’t need to become techies, but they need a new process to make tch work for them. That’s when I realised AI can help. My goal is to give non-technical founders the creative freedom to move fast but with the discipline of the corporate world. We guide them to develop something new, that wouldn’t have been able to have been developed before. It’s now possible to create, realise and build that idea, it’s a mindset shift where we can become our own CPOs, CEOs, CMO, COOs, etc, we just need the right community around us. I want founders to be aware that they can solve their own problems and they can build something in plain English. When you’re building something, ask yourself who are the customers? What do they need? How much am I going to charge for this? Once there you can start generating technical foundations and product requirements – front/back end, database, APIs, etc in order to create that product. BEST MOMENTS ‘Vibe coding was coined in 2025, so it’s brand new, but I’d been doing it before the term was created.’ ‘AI gives us a lot of tools but we need to know how to use them.’ ‘The beauty of AI platforms is that if you see that something is going wrong you can question the code, understand what’s wrong and ask the AI to fix it for you.’ ‘With vibe coding and NoCodeLab you can build your ideas in days, weeks, or months depending on your technical expertise or background.’ ABOUT THE GUEST Sara Simeone is a multi-award-winning entrepreneur and product strategist who has spent the past two decades turning frontier technologies into real-world growth engines. Today she wears several cutting-edge hats: Founder of NoCodeLab.ai, the first vibe-driven coding accelerator for non-technical founders; CEO & Co-founder of Niftyz.io, the Web3 token-factory that lets brands transform data and IP into tradable digital assets; and lecturer in Blockchain For Business at the MedieInstitutet in Sweden. ABOUT THE HOST Sabine is a corporate strategist turned entrepreneur. She is the CEO and Managing Partner of Alchemy Crew a venture lab that accelerates the curation, validation, & commercialization of new tech business models. Sabine is renowned within the insurance sector for building some of the most renowned tech startup accelerators around the world working with over 30 corporate insurers, accelerated over 100 startup ventures. Sabine is the co-editor of the bestseller The INSURTECH Book, a top 50 Women in Tech, a FinTech and InsurTech Influencer, an investor & multi-award winner. Twitter LinkedIn Instagram Facebook TikTok Email Website
SANS Internet Stormcenter Daily Network/Cyber Security and Information Security Stormcast
More Scans for SMS Gateways and APIs Attackers are not just looking for SMS Gateways like the scans we reported on last week, but they are also actively scanning for other ways to use APIs and add on tools to send messages using other people s credentials. https://isc.sans.edu/diary/More%20Scans%20for%20SMS%20Gateways%20and%20APIs/31902 AirBorne: AirPlay Vulnerabilities Researchers at Oligo revealed over 20 weaknesses they found in Apple s implementation of the AirPlay protocol. These vulnerabilities can be abused to execute code or launch denial-of-service attacks against affected devices. Apple patched the vulnerabilities in recent updates. https://www.oligo.security/blog/airborne