Podcasts about DevOps

Play Episode Listen Later Jul 29, 2026 57:53

Today, several members of our Packet Pushers podcast team assemble to discuss whether the grass is greener on the NetOps or DevOps side of the telemetry fence. William of The Cloud Gambit, Scott of Total Network Operations, and Ned and Kyler of Day Two DevOps discuss the difficulties and differences of getting telemetry and state... Read more »

technology networking cloud infrastructure bridging divide aws ned azure devops assemble telemetry packet pushers

D2DO309: Packet Pushers Assemble! Bridging the Telemetry Divide

Cybercrime Magazine Podcast

Play Episode Listen Later Jul 29, 2026 57:53

technology networking cloud infrastructure bridging divide aws ned azure devops assemble telemetry packet pushers

Securing The Build. Strengthen The Pipeline Without Slowing Delivery. Ben Rieger, Mend.io.

Play Episode Listen Later Jul 29, 2026 6:51

Ben Rieger is the head of DevOps, Security, and IT at Mend.io. In this episode, he joins host Scott Schober to discuss how to secure the build pipeline without slowing delivery. Securing The Build is brought to you by Mend.io, the leading application security solution, helping organizations reduce application risk efficiently. To learn more about our sponsor, visit https://mend.io.

security delivery strengthen pipeline securing slowing devops mend rieger scott schober

As enterprises integrate greater levels of AI into their operational workflows, many are concerned about the effectiveness and accuracy of the decisions with which it's being entrusted. Mike Fratto joins host Eric Hanselman to talk about his recent research into the ways in which observability can provide greater context to AI systems and administrative teams. Data is the raw material from which AI value is created and a lack of solid operational data will mean that management systems won't have a complete perspective. Observability platforms have been expanding to collect and correlate a broader range of data and they can be particularly useful, if they're integrated well. Observability data can also assist in building confidence in automation and support automation efforts by creating scripts and validating control decisions. It can be a huge help to staff to digest and make sense of existing run books and processes and guide decisions in the event of failures. When novel incidents occur, being able to rule out certain areas can be just as powerful as finding the root cause. No, the network isn't always the cause of the outage… More S&P Global Content: Next in Tech | Ep. 271: AI Networking Next in Tech | Ep. 247: Security and Observability For S&P Global subscribers: Updating processes and building trust are key to full operational autonomy – Highlights from VotE: DevOps Observability Market Monitor & Forecast Agent orchestration and observability go hand in hand: The case for governance in motion Host/Author: Eric Hanselman Guest: Mike Fratto Producer/Editor: Dylan Scheible Published With Assistance From: Feranmi Adeoshun and Sophie Carr

ai data security devops observability

New Tools, Ancient Failures, Same Old AWS

cloud devops conceptos ci cd esenciales

Play Episode Listen Later Jul 27, 2026 7:51

AWS Morning Brief for the week of July 26th, with Corey Quinn. Links:Amazon ECS now provides Action Logs for deployment and orchestration visibilityAmazon Managed Service for Prometheus supports 1.5B active metrics and 200K rules per workspaceAmazon SES introduces pricing plansAWS Network Load Balancer now supports Listener Rules for custom traffic routingAWS Organizations increases RCP quota to 2,000 per organizationAWS now supports automatic credit memo application preferencesAWS Secrets Manager now publishes secret update notifications to Amazon EventBridgeJVM memory, CPU, and classpath best practices for Java containers on AWSConnection pooling strategies in Amazon Aurora DSQLCustom OS installation now available on AWS DeepRacer devicesThermodynamic sampling of disordered materials with an analog Hamiltonian Rydberg simulatorUnlocking data residency use cases with Amazon S3 in AWS Local ZonesAWS Security Bulletins: New Tools, Ancient Failures

amazon cloud ancient failures aws java prometheus 200k devops cpu same old 5b new tools rcp amazon s3 corey quinn last week in aws

Make It Routine

Voice of the DBA

Play Episode Listen Later Jul 26, 2026 3:41

The first one is hard. The rest are boring. I heard this statement from someone recently, and it sounds like something a technical person would do. It's been a goal of mine, or maybe a direction to aim for, though I sometimes think that goal is more aspirational than actual. It can be hard to do that for every task. The first time I tackle something, it should be hard. It's new work. It's a new process/code/thought/action/etc. It's unfamiliar, and I spend more time on it than I want. After that, I'd hope I could repeat the thing again in much less time. That's the goal, and that's what we aim for in a lot of DevOps work. Make the things we think are hard, less hard. Make them boring by codifying things, using automation, and have the computer replicate the task. Read the rest of Make It Routine

routine devops

266 - 40 conceptos esenciales de DevOps y Cloud

DevTalles

Play Episode Listen Later Jul 26, 2026 32:42

40 conceptos esenciales de DevOps y Cloud: un recorrido rápido por los términos que todo programador debería reconocer, desde cultura DevOps y CI/CD hasta contenedores, infraestructura en la nube, observabilidad y seguridad.

Episode 291: Chelsea Finnie on PythonNZ

Sustain

Play Episode Listen Later Jul 24, 2026 29:27

Guest Chelsea Finnie Panelist Richard Littauer Show Notes In this episode of Sustain, Richard talks with Chelsea Finnie, Chairperson of Python New Zealand and a Senior Network DevOps Engineer at REANNZ, about the serious behind-the-scenes work required to keep open source communities alive. Chelsea shares how they moved from Python conference volunteer to community leader, then walks through Python New Zealand's financial crisis after discovering improper use of funds, the legal and governance challenges that followed, and how Linux Australia helped keep the organization and Kiwi PyCon alive. It's a candid conversation about trust, accountability, burnout, community rescue, and why open source leadership is about much more than code. Press download now to hear more! [00:01:47] Chelsea explains their work at REANNZ and their role as a senior network DevOps engineer including Python-based network automation and the PANDA initiative for advancing network device automation. [00:03:08] Chelsea talks about contributing an open source “glue” service connecting Prometheus Alertmanager to Argus using Flask. [00:04:21] Chelsea takes us through how they got involved with Python New Zealand, helping rescue AV production for a Kiwi PyCon event, and realizing they might be capable of helping run a conference themselves. [00:06:58] They share the lighter side of joining the Python NZ committee, including a sea shanty lightning talk and an election promise to write a Python-based sea shanty. [00:08:35] Richard shifts into the central issue: Python New Zealand leadership had been dealing with a major financial and governance crisis and Chelsea explains discovering the budget hole, seeking legal advice, reviewing the transactions, and what happened when Linux Australia stepped in. [00:14:43] Chelsea reflects on Linux Australia's role as a lifeline and why having financially stable open source organizations matters. [00:15:46] Richard highlights the often-overlooked legal and financial responsibility that comes with serving on nonprofit or open source boards and Chelsea shares where Python NZ stands now. [00:18:26] They tell us about the new safeguards and governance checks and notes that better accounting systems, such as Xero, would likely have exposed the financial problems earlier [00:20:31] Chelsea shares how they stay motivated through heavy work and the value of open source leadership. [00:21:57] Richard points out that Chelsea was not only helping fix financial and governance issues but also continuing to lead Python New Zealand and run events. Chelsea talks about the decision to run Kiwi PyCon on the “West Island.” [00:25:08] Chelsea says one of their goals as chairperson is to identify and support the next people who will lead Python New Zealand and future events. [00:26:14] Richard closes by encouraging listeners to get involved in their local open source communities, whether Python New Zealand or any other regional group. Spotlight [00:26:51] Richard's spotlight is, The Book of Knights. [00:27:17] Chelsea's spotlight is the video game, Outer Wilds. Links SustainOSS podcast@sustainoss.org richard@sustainoss.org SustainOSS Discourse SustainOSS Mastodon SustainOSS Bluesky SustainOSS LinkedIn Open Collective-SustainOSS (Contribute) Richard Littauer Socials Chelsea Finnie LinkedIn REANNZ Python New Zealand Catalyst Danny Adair GitHub Frank Keating LinkedIn Simon Merrick LinkedIn Kiwi PyCon ponekeshantyclub Tom Eastman LinkedIn Linux Australia The Book of Knights by Yves Meynard Outer Wilds Prometheus-argus-glue Sponsor CURIOSS Credits Produced by Richard Littauer Edited by Paul M. Bahr at Peachtree Sound Show notes by DeAnn Bahr Peachtree Sound Special Guest: Chelsea Finnie.

press knights spotlight av panda python sustain devops chairperson xero outer wilds argus flask west island

N4N060: Your First Wi-Fi Network Part 1

Play Episode Listen Later Jul 23, 2026 62:27

Have you ever wondered how data actually travels through a Wi-Fi network? Holly and Ethan break down the fundamentals of wireless networking, including radio frequencies and channel planning. They also address the complexities of roaming, how the Wi-Fi space has changed over the years, and share advice on how to design and maintain a home... Read more »

news network networking cloud wifi infrastructure analysis networks devops ipv6

RR018 Reflections on Season 5, what we loved, learned and the responsibility we have as Tech leaders today

Cloud Realities

Play Episode Listen Later Jul 23, 2026 88:48

Dave, Esmee, Rob and Marcel wrap up an incredible Season 5, reflecting on the biggest technology trends, the most memorable conversations, and the fantastic guests who joined us along the way. From AI and cybersecurity to quantum computing and digital transformation, it's been a season full of insights, innovation, and inspiration.Thank you to all our listeners, guests, and supporters for being part of the Realities Remixed journey. We wish you a fantastic summer and look forward to bringing you even more thought-provoking conversations when we return in September for Season 6!TLDR00:27 – Season 5 reflections and key trends02:38 – Summer observations and random interruptions05:01 – From Cloud Realities to Realities Remixed08:05 – Winning 3 Global Marketing Awards10:50 – Esmee's journey and what's next14:05 – Technology trends revisited15:20 – Cybersecurity and investment challenges18:34 – Scaling AI beyond pilots25:41 – The reality of business transformation 33:35 – AI governance, agents, ethics, and the future of work47:00 – Knowledge retention and collaboration49:20 – Hardware innovation for AI51:17 – Macro trends and standout guests57:45 – Digital sovereignty and resilience1:08:00 – Why systems thinking must change1:12:00 – The Octopus Organisation1:18:24 – Summer plans and what's aheadHostsDave Chapman: https://www.linkedin.com/in/chapmandr/Esmee van de Giessen: https://www.linkedin.com/in/esmeevandegiessen/Rob Kernahan: https://www.linkedin.com/in/rob-kernahan/ ProductionMarcel van der Burg: https://www.linkedin.com/in/marcel-vd-burg/Dave Chapman: https://www.linkedin.com/in/chapmandr/ SoundBen Corbett: https://www.linkedin.com/in/ben-corbett-3b6a11135/Louis Corbett: https://www.linkedin.com/in/louis-corbett-087250264/ 'Realities Remixed' is an original podcast from Capgemini

TCG080: Skills Over MCP and More

Play Episode Listen Later Jul 22, 2026 56:17

What if your MCP server shipped with its own manual? Angie Jones, VP of Developer Experience at the Agentic AI Foundation, joins William and Eyvonne to break down the Skills Over MCP working group effort, which delivers Agent Skills through MCP’s existing resources primitive (think voice over IP, not skills versus MCP). Angie shares her... Read more »

skills ip saas aws azure devops cloud computing kubernetes mcp paas gcp digital ocean iaas developer experience aiops angie jones gke

D2DO308: Exploring the AI Governance Paradox (Sponsored)

Play Episode Listen Later Jul 22, 2026 48:39

In this sponsored episode, Jonah Kowall from Spacelift joins the show to unpack the findings of the 2026 Infrastructure Automation Report. The discussion covers the “governance paradox”, where organizations have confidence in their AI oversight despite a lack of formal policies. Ned and Jonah provide actionable insights on bridging the gap between automation and the... Read more »

ai technology networking cloud paradoxes infrastructure governance aws ned azure devops

D2DO308: Exploring the AI Governance Paradox (Sponsored)

Play Episode Listen Later Jul 22, 2026 48:39

ai technology networking cloud paradoxes infrastructure governance aws ned azure devops

TCG080: Skills Over MCP and More

Cloud Posse DevOps "Office Hours" Podcast

Play Episode Listen Later Jul 22, 2026 56:17

skills ip saas aws azure devops cloud computing kubernetes mcp paas gcp digital ocean iaas developer experience aiops angie jones gke

D2DO308: Exploring the AI Governance Paradox (Sponsored)

Day 2 Cloud

Play Episode Listen Later Jul 22, 2026 48:39

ai technology networking cloud paradoxes infrastructure governance aws ned azure devops

Cloud Posse DevOps "Office Hours" (2026-07-22)

Play Episode Listen Later Jul 22, 2026 59:20

live cloud register aws devops posse kubernetes office hours ci cd terraform hourssupport

Why AI Makes Your Legacy Systems the Biggest Target with Andre Priebe, CTO at iC Consult Group

Hybrid Identity Protection Podcast

Play Episode Listen Later Jul 21, 2026 46:54

This episode features Andre Priebe, Chief Technology Officer at iC Consult Group, the world's largest independent provider of identity security services.Andre has spent more than two decades leading IAM projects for large-scale enterprises across workforce, customer, and device identity domains. As CTO, he steers iC Consult's Centers of Excellence, service portfolio, and vendor strategy, and advises strategic customers on shaping their identity programs.In this episode, Andre explains why the gap between identity security awareness and actual maturity is growing every day, and how AI is making it faster and easier for attackers to find the weaknesses organizations already know they have. He breaks down why recovery is the most underestimated phase of the NIST cybersecurity framework and what it really costs when organizations haven't prepared for it.This episode is a candid look at the state of identity security from someone who sees it across hundreds of organizations every year.Guest Bio Andre Priebe serves as the Chief Technology Officer at iC Consult Group, a vendor-independent system integrator specializing in Identity & Access Management and Identity Security with a global team of over 850 employees. Boasting more than two decades of experience managing IAM projects focused on workforce, customer, and device identities within large-scale enterprises, Andre steers the Centers of Excellence, the service portfolio, and vendor strategy at iC Consult.Andre's role involves a deep focus on emerging approaches, trends, and technologies within the IAM sector, assessing their business value for iC Consult's clientele. He is an innovator with a patent in DevOps-related IAM methodologies, and he holds a B.Sc. and an MBA.Guest Quote “Threat actors, for them, it's easier than ever before, faster, more efficient to identify that kind of technical debt, the weaknesses. They are not going for your latest Entra ID, conditional access, configuration with all the fancy stuff in place to really make sure that nobody else accessing that resource. No. They're going for the old systems, for old protocols, for areas that might be out of control, out of visibility. Third parties, contractors, unmanaged devices.”Time stamps 0:40 Meet Andre Priebe: Veteran IAM Expert 2:43 The State of Identity Security Awareness 4:51 The Reality of Technical Debt 6:16 How AI Is Changing the Attack Landscape 10:37 Zero Trust Is Mandatory but Almost Nobody Has Achieved It 15:06 What Customers Are Actually Asking About Now 19:19 Planning for Identity Recovery 26:08 The Most Underestimated Part of Recovery 29:56 Return to Trustworthiness vs Return to Operations 39:42 AI Agents and Non-Human Identities 44:02 Conclusion and Final ThoughtsSponsor The HIP Podcast is brought to you by Semperis, the leader in identity-driven cyber resilience for the hybrid enterprise. Trusted by the world's leading businesses, Semperis protects critical Active Directory and Entra ID environments from cyberattacks, ensuring rapid recovery and business continuity when every second counts. Visit semperis.com to learn more.LinksConnect with Andre on LinkedInConnect with Sean on LinkedInDon't miss future episodesLearn more about SemperisHIP Conference 26 is coming to Nashville, September 8–10, 2026.Join us to explore this year's theme, Redefining Resilience, at the world's premier practitioner-led conference focused on securing hybrid identity environments.If you love the conversations on the HIP Podcast, this is where the community comes together in person. Learn more and register at https://www.hipconf.com/.

LCC 342 - Bun en Rust, TypeScript en Go

Les Cast Codeurs Podcast

Play Episode Listen Later Jul 21, 2026 92:59

Bun quitte Zig pour Rust en 11 jours à coups de Claude Code, pour 165 000$ payés par Anthropic : la réaction du créateur de Zig ne se fait pas attendre. TypeScript 7 débarque, réécrit en Go, 8 à 12x plus rapide. Entre les deux, Vidocq réimplémente Jakarta EE en souverain, le COBOL met un uppercut aux microservices, et un CTO demande à son équipe combien de temps il lui faudrait pour revenir à sa vélocité antérieure sans Claude Code. De quoi réfléchir avant le prochain rewrite. Enregistré le 17 juillet 2026 Téléchargement de l'épisode LesCastCodeurs-Episode-342.mp3 ou en vidéo sur YouTube. News Langages Est-ce qu'on peut aussi utiliser des double, des longs, ou autre pour gérer les montants monétaires en Java ? https://blog.frankel.ch/bigdecimal-vs-double/ double (IEEE 754) Usage : Calculs scientifiques, métriques, statistiques. Avantages : Très performant (matériel), idéal pour l'approximatif. Risques : Erreurs d'accumulation, égalité (==) trompeuse, NaN / -0.0. Bonnes pratiques : Utiliser une tolérance (epsilon ou ULP) pour comparer ; utiliser des algorithmes de sommation compensée (Kahan/Neumaier) pour la précision. BigDecimal Usage : Finance, comptabilité, fiscalité (précision décimale stricte). Avantages : Contrôle total des arrondis et de l'échelle. Risques : Lent (allocations), immutabilité (risque de mauvaise réaffectation), confusion equals() vs compareTo(). Bonnes pratiques : Initialiser via String ou valueOf() ; utiliser compareTo pour l'égalité. Point fixe (long) Usage : Trading, systèmes haute performance, paiements. Avantages : Très rapide, déterministe, zéro allocation. Risques : Gestion manuelle de l'échelle et des débordements (Math.addExact). Points de vigilance en production Sérialisation (JSON) : Préférer les String pour BigDecimal pour éviter la perte d'échelle. Atomicité : double n'est pas atomique ; utiliser volatile ou DoubleAdder (pour les compteurs). Tests : Toujours définir un delta ou Offset pour les tests de flottants. Bibliothèques recommandées Moneta (JSR 354) : Standard bancaire complet. decimal4j : Optimisé pour le point fixe haute performance. Apache Commons Numbers : Outils robustes pour la précision et les sommations. Typescript 7 est de sortie devblogs.microsoft.com/typescript/announcing-typescript-7-0 Performance majeure : Portage natif en Go offrant des gains de vitesse de 8x à 12x et une consommation mémoire réduite. Architecture optimisée : Utilisation du multithreading (mémoire partagée) et parallélisation native (analyse, vérification de types,émission). Nouvelles options de contrôle : Introduction des flags –checkers, –builders (parallélisation) et –singleThreaded (mode mono-cœur). Nouvel observateur de fichiers : Passage à une solution basée sur @parcel/watcher pour une meilleure réactivité et stabilité du mode –watch. Compatibilité et transition : Compatible avec les bases de code TypeScript 6.0. Utilisation du package @typescript/typescript6 recommandée pour maintenir des outils dépendants de l'ancienne API. Changements de configuration : Durcissement des défauts (ex: strict activé par défaut) et suppression de nombreuses options obsolètes (target: es5, baseUrl, etc.). Amélioration de l'expérience éditeur : Serveur de langage (LSP) plus stable avec une réduction de 80 % des erreurs et 60 % des crashs. Limitations actuelles : Support incomplet pour les frameworks utilisant des plugins de langage (Vue, Svelte, Astro, Angular) en attendant une API stable. "Java, the documentary" est sur YouTube, retraçant l'histoire du langage youtube.com/watch?v=… La vidéo n'était pas encore disponible à l'heure de l'enregistrement. Sortie officielle le 17 juillet. Avec des interviews de James Gosling, Brian Goetz, Venkat Subramaniam, et bien d'autres. Librairies What's New in 8.0 - Hibernate docs.hibernate.org/orm/8.0/whats-new L'intégration de Jakarta Persistence 4.0 apporte des nouveautés majeures comme EntityAgent (qui standardise la StatelessSession), les mappings de result set en SQL natif, et de nouvelles options de configuration de session et de requêtes (Session Creation Options, Query Options). Le support de Jakarta Data 1.1 est ajouté pour les Hibernate Data Repositories, incluant l'intégration avec les requêtes statiques JPA4, les projections @Select, et les repositories asynchrones via Jakarta Concurrency ou Hibernate Reactive. L'introduction du Graph-based Flushing remplace l'ancienne approche basée sur des heuristiques par un modèle de dépendances utilisant les contraintes relationnelles, afin d'améliorer la fiabilité des tris, la gestion des batchs et les performances globales (bien que l'ancienne méthode reste temporairement disponible). L'API ProcedureCall a été améliorée pour faciliter le casting des résultats (asResultSetOutput) et permettre la déclaration paresseuse (lazy) du mapping des ResultSet. Hibernate supporte désormais la sécurité au niveau de la ligne (Row-Level Security) de manière native pour les bases de données compatibles (PostgreSQL, Db2, SQL Server, CockroachDB) afin de gérer la visibilité en contexte multi-tenant. Une nouvelle méthode getReference() permet dorénavant de récupérer la référence d'une entité directement à partir de son natural id. Le mode Safe Mode Validator (hibernate.query.safe_mode_enabled=true) fait son apparition pour bloquer les opérations risquées comme sql(), function() ou column() dans les requêtes HQL et Criteria, ce qui est particulièrement utile pour les applications exposées aux LLMs. La gestion des associations bidirectionnelles lors de la phase de flush peut maintenant être prise en charge automatiquement par Hibernate (hibernate.bidirectionality_management=true), synchronisant la référence côté inverse de l'association. Le Subselect Fetching est considérablement amélioré, supportant dorénavant les associations "to-one" pour le bulk select fetching (au lieu de se limiter aux collections) et devenant une option de premier ordre via FetchMethod.BY_SUBQUERY. Un des papas de Cucumber et Gherkin lance Var, une alternative pour le test et le BDD var.oselvar.com Lancement de Vár : Nouvel outil de test créé pour pallier les défauts de Cucumber. Limites de Cucumber : Syntaxe Gherkin trop rigide, intégration difficile avec les exécuteurs de tests et support éditeur limité. Usage avec l'IA : Conçu spécifiquement pour vérifier que les agents IA respectent les intentions et spécifications de l'utilisateur. Fonctionnement : Utilisation du Markdown plutôt que du Gherkin ; sert à la fois de guide et d'outil de vérification. Développement assisté : Code et documentation générés en grande partie par Claude sous supervision humaine. Appel aux retours : Projet ouvert aux tests et aux critiques de la communauté. Web Une nouvelle méthode HTTP : QUERY https://kreya.app/blog/new-http-query-method-explained/ Méthode HTTP QUERY (RFC 10008) pour les recherches complexes. Problème : GET (limité par l'URL) vs POST (sémantique inadaptée). Avantages : Permet un corps de requête, sûr, idempotent et cacheable. Limites : Support infrastructurel faible, non partageable par lien, cache complexe. Usage : À réserver aux requêtes complexes si l'environnement le permet. Comment je fais du design en tant que dev backend eventuallycoding.com/p/comment-je-fais-du-design-en-tant-que-dev-backend Hugo Lassiège retrace l'évolution de son workflow de création d'interfaces en tant que développeur backend, depuis ses débuts avec Bootstrap jusqu'à l'ère de l'intelligence artificielle. L'article explique comment la structuration des éléments visuels a progressé grâce à l'Atomic Design, l'émergence des design systems et l'adoption des design tokens via un framework comme Tailwind. L'auteur détaille son processus actuel qui s'appuie fortement sur Claude Design pour générer et itérer sur des maquettes à partir d'un brief, d'un screenshot ou d'un design system de référence. Il aborde également le risque de slopification et de standardisation extrême apporté par ces outils, rappelant que si l'IA simplifie la technique, il reste crucial d'injecter de l'identité et de l'originalité pour éviter un web trop aseptisé. Data et Intelligence Artificielle De l'utilisation de SKILL.md et de "loop engineering" pour augmenter sa productivité glaforge.dev/posts/…/of-skills-and-loops-with-ai-assistance Les skills permettent d'encoder une procédure de manière répétable et automatisable Le loop engineering enlève l'humain de la boucle afin que l'agent atteigne un objectif donné de façon plus autonome Pour écrire des Codelabs (sorte de tutoriel guidé pas à pas) Guillaume a transformé une séance de création de codelab avec son agent préféré (Antigravity) en skill réutilisable pour l'écriture de ses prochains codelabs Il a également utilisé l'approche de "loop engineering" à la mode en ce moment pour que son agent IA compile, exécute, teste les instructions et le code de son codelab, pour qu'il soit complètement fonctionnel Gain estimé : passer de 2 jours de travail à moins de 2 heures ! Redeploying Claude Fable 5 anthropic.com/news/redeploying-fable-5 Anthropic a annoncé le rétablissement de l'accès à ses modèles Claude Fable 5 et Mythos 5, qui avaient été suspendus suite à des restrictions d'exportation imposées par le gouvernement américain le 12 juin 2026. Cette suspension faisait suite à un rapport d'Amazon démontrant une méthode pour contourner les garde-fous de Fable 5, lui permettant d'identifier et d'exploiter une vulnérabilité logicielle (un jailbreak). Pour y remédier, Anthropic a renforcé ses mécanismes de sécurité en déployant un nouveau classifieur capable de bloquer cette technique spécifique dans plus de 99 % des cas, acceptant en contrepartie une augmentation des faux positifs sur des requêtes bénignes. Face à l'absence de consensus sur l'évaluation des jailbreaks, Anthropic s'associe à Amazon, Microsoft, Google et d'autres partenaires pour développer un standard industriel évaluant la sévérité de ces failles selon quatre critères : gain de capacité, étendue du gain, facilité d'arsenalisation et découvrabilité. L'entreprise s'engage également à approfondir sa collaboration avec le gouvernement américain, notamment via des évaluations pré-déploiement, un partage rapide d'informations sur les failles, et des ressources dédiées à la recherche conjointe sur la sécurité de l'IA. Outillage La réécriture de Bun en Rust et la réaction du créateur de Zig bun.com/blog/bun-in-rust et andrewkelley.me/post/my-thoughts-bun-rust-rewrite.html Bun, le runtime JavaScript et TypeScript écrit à l'origine en Zig, a été entièrement réécrit en Rust pour des raisons de stabilité et de gestion de la mémoire. Cette migration massive d'un demi-million de lignes de code a été bouclée en seulement 11 jours grâce à l'utilisation intensive de Claude Code fonctionnant en parallèle, pour un coût d'API estimé à 165 000 dollars financé par Anthropic. Andrew Kelley, le créateur de Zig, a réagi publiquement en qualifiant l'ancienne base de code de Bun de "slop" remplie de hacks et de fuites mémoire accumulées par une course aux fonctionnalités. Kelley exprime son soulagement face à ce départ, expliquant que les plantages incessants de Bun devenaient un passif réputationnel toxique pour le langage Zig et sa fondation. Le rachat de Bun par Anthropic fin 2025 avait déjà mis fin aux donations financières de Bun envers la Zig Software Foundation, facilitant cette séparation. La nouvelle version Rust de Bun passe désormais la quasi-totalité des tests, réduit la taille du binaire et est déjà déployée de manière transparente en production dans Claude Code. Nouveautés de Git 2.55 github.blog/open-source/git/highlights-from-git-2-55 Support natif de FSMonitor sous Linux via inotify pour accélérer les commandes comme git status sur les grands dépôts Intégration de la compaction incrémentale MIDX (multi-pack index) dans git repack pour optimiser la réécriture des métadonnées Amélioration drastique des performances de génération des bitmaps et des pseudo-merge bitmaps lors des tâches de maintenance Nouvelle commande expérimentale git history fixup pour intégrer facilement des modifications locales dans un commit antérieur Possibilité d'exécuter des hooks configurés en parallèle pour optimiser le temps de build et de validation Utilisation d'un autostash automatique lors d'un git checkout -m en cas de conflit de fusion pour éviter de bloquer l'espace de travail Nouvelle commande git format-rev permettant de formater rapidement des commits reçus via l'entrée standard (stdin) Support du push simultané vers un groupe de remotes configuré Protection contre l'exécution de séquences de contrôle de terminal malveillantes via les flux de progression distants Vidocq, une réimplémentation souveraine et sans dépendance de Jakarta EE et Microprofile vidocq.dev/posts/vidocq-a-sovereign-jakarta-ee-and-microprofile-runtime Lancement de Vidocq : Runtime Java open source complet, compatible Jakarta EE Core Profile et Souveraineté numérique : Projet européen hébergé sur Codeberg, sous licences EUPL 1.2, EPL 2 et GPL 2.0. Standardisation totale : Implémentation fidèle des spécifications (CDI, REST, JSON, etc.), validée par 5 650 tests TCK officiels. Sécurité radicale : Zéro dépendance externe et aucune bibliothèque tierce. Aucune manipulation de bytecode à l'exécution (« magie » générée à la compilation via JDK 25). Compatible JPMS, AOT, GraalVM et Leyden CDS. Disponibilité : Projet en phase alpha, code et documentation accessibles sur vidocq.dev. Article complémentaire qui revient sur la genèse de Vidocq, en utilisant l'IA et les TCKs pour driver l'aspect spec-driven development vidocq.dev/posts/the-story-of-vidocq Le "selfware" : Guillaume s'est fait plais' en vibe-codant son propre éditeur de texte glaforge.dev/posts/…/selfware-building-my-own-text-editor-without-knowing-swift Concept de « Selfware » : création de logiciels conçus exclusivement pour soi-même, sans monétisation ni contraintes liées aux utilisateurs tiers. Le rôle de l'IA : les agents de programmation (comme Antigravity) suppriment la barrière technique de l'apprentissage des langages (Swift, APIs) pour les non-développeurs. Développement minimaliste : privilégier la performance et l'utilité directe (démarrage instantané, interface native) au détriment des fonctionnalités complexes (plugins, télémétrie, gestion de comptes). Absence de pression : libération des contraintes liées à la compatibilité, à la maintenance logicielle et aux retours utilisateurs ; le logiciel n'a besoin d'être « assez bon » que pour ses propres besoins. Incitation à l'autonomie : encourager la création d'outils sur mesure pour résoudre les frictions quotidiennes plutôt que de subir les limitations des logiciels commerciaux. Architecture Le cobol a donné un uppercut au microservices https://freedium-mirror.cfd/@maahisoft20/your-microservices-lost-to-cobol-let-that-sink-in-8ce2e236d007 Retour d'expérience sur la migration d'un système COBOL vers des microservices cloud-native qui s'est soldée par un retour en arrière après avoir constaté que le traitement batch initial était plus rapide, moins cher et plus fiable Là où le batch COBOL traitait 2.4 millions d'enregistrements en 11 minutes, le système distribué modernisé à base de message queues, retries et Kubernetes prenait 47 minutes et tombait sous la charge COBOL brille par ses caractéristiques conçues spécifiquement pour la finance comme le calcul décimal précis sans floating point errors et l'absence totale d'overhead réseau, de conteneurs ou de cold starts Rappel que distribuer un système multiplie les points de défaillance silencieux et complexifie la gestion de la cohérence transactionnelle par rapport à une exécution locale séquentielle Une invitation à se demander si les projets de décomposition en microservices apportent réellement un gain de performance de bout en bout pour l'utilisateur final ou s'ils optimisent seulement le diagramme d'architecture Méthodologies Ma meilleure question d'entretien Spring beaufume.fr/articles/spring-interview Florian beaufumé partage sa question d'entretien favorite pour évaluer des développeurs Spring de niveau intermédiaire à avancé : "Que pouvez-vous me dire sur le paramètre spring.jpa.open-in-view ?". Ce paramètre détermine l'activation du pattern Open Session In View (OSIV) qui, lorsqu'il est à true (la valeur par défaut dans Spring Boot), maintient l'un EntityManager JPA ouvert durant toute la requête HTTP. Si l'OSIV facilite le développement en évitant les fameuses LazyInitializationException lors de la sérialisation des entités en JSON, il pose d'importants problèmes de performance en provoquant des requêtes SQL non maîtrisées (comme le problème du N+1 select) en dehors de la couche service. Maintenir l'OSIV actif augmente également le temps de rétention des connexions au sein du pool de la base de données, limitant la scalabilité de l'application. La recommandation est de désactiver ce comportement en le positionnant à false, et de gérer explicitement le chargement des données requises au sein des transactions (via des DTOs, des requêtes JOIN FETCH ou des Entity Graphs) pour garder le contrôle sur les accès à la base de données. 10 points à retenir du rapport AI Engineering 2026 : The Acceleration Whiplash faros.ai/blog/ai-acceleration-whiplash-takeaways L'IA a franchi un cap et est devenue l'auteur principal du code : le taux d'acceptation du code généré est passé de 20% à 60% dans les équipes étudiées par Faros AI. La vélocité métier est bien réelle, avec une augmentation de 66% des epics livrées et une hausse de 33,7% du throughput des tâches par développeur. Ce volume cache un code churn massif (+861%), ce qui signifie qu'une quantité énorme de code est supprimée ou remplacée peu après avoir été ajoutée. La qualité en aval se dégrade fortement : les bugs par développeur ont augmenté de 54% et le nombre d'incidents par pull request a explosé de 242,7%. Le processus de code review est complètement saturé, entraînant un temps médian de relecture multiplié par cinq et une augmentation de 31,3% des PRs mergées sans aucune revue. Le système repose de plus en plus sur les développeurs seniors qui subissent une "senior engineer tax", devant relire un volume insoutenable de code à l'apparence correcte mais structurellement fragile. Contrairement à certaines hypothèses récentes de DORA, une forte maturité DevOps ne protège pas les entreprises contre cette détérioration ; le "Acceleration Whiplash" frappe de la même manière les équipes très performantes. En résumé, les outils d'IA inondent les pipelines de livraison avec un volume de code pensé pour un rythme machine, alors que les systèmes de vérification reposent toujours sur un rythme de validation humain. Loi, société et organisation Le coût d'une equipe d'engineering qui ne sait plus ce qu'elle fait dans un contexte d'augmentation de coût des coding agents https://freedium-mirror.cfd/@developer_programmer/i-spent-47-000-on-claude-code-in-90-[…]-asked-me-one-question-and-i-couldnt-answer-it-af3b203f81bb Une équipe de 8 ingénieurs a vu sa vélocité de développement exploser en utilisant Claude Code de manière intensive, jusqu'à recevoir une facture d'API salée de 47 213 $ pour seulement trois mois d'utilisation. Face à cette dépense, la question piège du CTO n'était pas sur le montant, mais sur la dépendance : "Si nous arrêtions Claude Code demain, combien de temps faudrait-il pour que notre vélocité revienne à son niveau initial ?". L'auteur s'est rendu compte qu'il était incapable de répondre car son équipe, en particulier les profils juniors, avait commencé à perdre l'habitude de concevoir et d'implémenter des fonctionnalités complexes sans l'aide permanente d'un agent. Le deuxième risque stratégique soulevé est celui de la dépendance tarifaire et du vendor lock-in : si l'outil devient une infrastructure indispensable au quotidien, l'entreprise perd tout pouvoir de négociation face aux augmentations de prix de l'éditeur d'IA. Pour éviter que l'IA ne devienne une béquille qui atrophie les compétences de l'équipe, l'article suggère de poser des limites budgétaires strictes, d'organiser régulièrement des sprints sans IA ("AI-free sprints") et de concevoir des processus de développement portables. Retour de Nicolas Delsaux sur jqwik qui donne une perspective plus complète concernant jqwik, il me semble que vous oubliez (comme tous les gens qui parlent de LLM dans "l'industrie") que l'auteur n'a pas fait ça juste pour faire chier le monde, mais parce que ces outils ont des externalités incroyablement négatives, ce dont l'auteur s'explique dans son blog (blog.johanneslink.net/2026/06/09/the-jqwik-anti-ai-affair) Vous oubliez également de signaler que le ticket (github.com/jqwik-team/jqwik/issues/708) par lequel un utilisateur se plaint de cette fonctionnalité a été écrit par un agent. N'oubliez pas non plus que l'enthousiasme pour ces technologies n'est en fait pas universel, et que ces technologies sont loin d'être inévitables (les gains de vitesse ne sont, d'après circle CI - circleci.com/resources/2026-state-of-software-delivery, pas des gains de productivité ) OkHttp, Okio, Retrofit et SQLDelight rejoignent Commonhaus ! commonhaus.org/activity/315.html La fondation Commonhaus, via une publication de Andres Almiray, annonce l'arrivée de quatre projets majeurs de l'écosystème Java et Kotlin : OkHttp, Okio, Retrofit et SQLDelight. Ces projets, initialement créés chez Square (devenu Block), sont désormais regroupés et gérés sous la bannière lysine.dev au sein de la fondation. Jesse Wilson et Jake Wharton, créateurs et mainteneurs historiques de ces outils, rejoignent Commonhaus en tant que leaders de lysine.dev. Suite à leur départ de Block, ils expliquent avoir choisi Commonhaus pour offrir à leur immense communauté d'utilisateurs un cadre de gouvernance pérenne, stable et digne de confiance. Conférences La liste des conférences provenant de Developers Conferences Agenda/List par Aurélie Vache et contributeurs : 28-30 août 2026 : State of the Map - Champs-sur-Marne (France) 4 septembre 2026 : JUG Summer Camp 2026 - La Rochelle (France) 10-11 septembre 2026 : Nantes Craft - Nantes (France) 17 septembre 2026 : dotAI - Paris (France) 17-18 septembre 2026 : API Platform Conference 2026 - Lille (France) 18 septembre 2026 : WordCamp Bretagne - Rennes (France) 18 septembre 2026 : dotJS - Paris (France) 18 septembre 2026 : WordCamp Bretagne - Rennes (France) 22 septembre 2026 : Salon Data 2026 - Nantes (France) 22-23 septembre 2026 : Agile en Seine & IA 2026 - Paris (France) 24 septembre 2026 : aMP Day Montpellier 2026 - Montpellier (France) 24 septembre 2026 : OWASP AppSec Days France 2026 - Paris (France) 24 septembre 2026 : PlatformCon Paris - Paris (France) 24 septembre 2026 : React Native Connection 2026 - Paris (France) 24-26 septembre 2026 : Paris Web 2026 - Paris (France) 25 septembre 2026 : SAP Inside Track Paris 2026 - Paris (France) 28-29 septembre 2026 : 4th Tech Summit on AI & Robotics - Paris (France) & Online 1 octobre 2026 : WAX 2026 - Marseille (France) 1-2 octobre 2026 : Volcamp - Clermont-Ferrand (France) 2 octobre 2026 : DevFest Perros-Guirec 2026 - Perros-Guirec (France) 5-9 octobre 2026 : Devoxx Belgium - Antwerp (Belgium) 8-9 octobre 2026 : Forum PHP 2026 - Marne-la-Vallée (France) 12 octobre 2026 : Dev With AI - Paris (France) 22-23 octobre 2026 : Agile Tour Bordeaux 2026 - Bordeaux (France) 26 octobre 2026 : Agile Tour Montpellier - Montpellier (France) 27-29 octobre 2026 : Directions EMEA 2026 - Paris (France) 29-30 octobre 2026 : Campus Agile Grenoble - Grenoble (France) 29-30 octobre 2026 : BDX I/O 2026 - Bordeaux (France) 29-30 octobre 2026 : Agile Tour Nantais 2026 - Nantes (France) 29 octobre 2026-1 novembre 2026 : Pycon FR - Biarritz (France) 30 octobre 2026 : Cloud Nord 2026 - Lille (France) 4-5 novembre 2026 : Devoxx Morocco - Casablanca (Morocco) 14-15 novembre 2026 : Capitole du Libre - Toulouse (France) 19 novembre 2026 : DevFest Toulouse 2026 - Toulouse (France) 19 novembre 2026 : Agile Laval 2026 - Laval (France) 19 novembre 2026 : OVHcloud Summit - Paris (France) 19 novembre 2026 : Codeurs en Seine - Rouen (France) 27 novembre 2026 : DevFest Paris 2026 - Paris (France) 1-3 décembre 2026 : Apidays Paris - Paris (France) 2-3 décembre 2026 : Cloud Native AI Summit Europe - Paris (France) 4 décembre 2026 : DevFest Lyon 2026 - Lyon (France) 4 décembre 2026 : DevFest Dijon 2026 - Dijon (France) 9-10 décembre 2026 : OpenSource Expérience - Paris (France) 9-10 décembre 2026 : DevOps REX - Paris (France) 10 décembre 2026 : KCD Provence - Aix-en-Provence (France) 10 décembre 2026 : DevCon 28 : sécurité | post-quantique | hacking édition 2027 - Paris (France) 14-16 janvier 2027 : SnowCamp 2027 - Grenoble (France) 7-9 avril 2027 : Devoxx France 2027 - Paris (France) 3 juin 2027 : Cloud Native Days France 2027 - Paris (France) Nous contacter Pour réagir à cet épisode, venez discuter sur le groupe Google https://groups.google.com/group/lescastcodeurs Contactez-nous via X/twitter https://twitter.com/lescastcodeurs ou Bluesky https://bsky.app/profile/lescastcodeurs.com Faire un crowdcast ou une crowdquestion Soutenez Les Cast Codeurs sur Patreon https://www.patreon.com/LesCastCodeurs Tous les épisodes et toutes les infos sur https://lescastcodeurs.com/

amazon google france state spring performance data microsoft code math points concept architecture skill ces square ia cto var swift limitations faire suite blue sky passage rust select api florian retour absence conf agile mythos nouvelle astro linux java guillaume string int offset apis fable aur usage probl criteria limites llm anthropic devops javascript projet nouvel epl nouvelles appel wax cucumbers graphs vall compatible bonnes sql prs loi git kubernetes utiliser sortie lancement flushing bootstrap aucune vue tailwinds cdi contrairement angular biblioth enregistr ieee changements nouveaut json zig rappel bun paris france typescript aot portage possibilit utilisation markdown cobol maintenir capitole retrofit bdd postgresql antigravity sql server gpl vache lsp tck hibernate svelte tech summit optimis gherkin standardisation impl devcon tcks spring boot vidocq jdk lyon france serveur cockroachdb bordeaux france db2 jesse wilson ulp provence france toulouse france james gosling lille france andrew kelley codeurs montpellier france dtos dijon france brian goetz devoxx france eupl

You Owe Your Country's GDP to AWS

php[podcast] episodes from php[architect]

Play Episode Listen Later Jul 20, 2026 8:12

AWS Morning Brief for the week of July 20th, with Corey Quinn. Links:Amazon CloudWatch Logs announces intelligent tiering for storageAmazon Cognito now supports importing users with password hashesIntroducing Amazon GuardDuty AI Protection for AWS AI workloadsAWS Organizations now applies account departure security controls by default for new organizations created via AWS Organizations consoleAWS Lambda announces self-managed code storageAmazon S3 removes 30-day minimum for transitions to S3 Standard-IA and S3 One Zone-IAAmazon SQS turns 20: Two decades of reliable messaging at scaleAnnouncing Lambda MicroVMs: serverless compute environments with VM-level isolation and near-instant startupEliminating Java cold starts with AWS Lambda Managed InstancesIntroducing open source Bulk Executor for Amazon DynamoDBAutomating CIDR expansion: Reducing IP exhaustion downtimeSetting up Layer 2 Networking on Amazon EC2Security Hub adds AI workload protection and multicloud support for Microsoft AzureFive CVEs and the Agentic AI Security Reckoning

amazon ai networking cloud aws layer vm devops corey quinn last week in aws

Michael Nygard: AI - Episode 411

Azure DevOps Podcast

Play Episode Listen Later Jul 20, 2026 45:16

https://clearmeasure.com/developers/forums/ Michael Nygard advises consulting firms, private equity teams, CTOs, CEOs, and boards when they require senior technology judgment for limited-term, high-impact situations — including architecture assessment, platform rescue, cloud and data cost intervention, AI engineering enablement, technical diligence, divestiture and carve-out architecture, and operating-model redesign. Over a 35-year career, he has worked at the seam where people, processes, organizations, and the systems they build intersect. Most organizations treat those as separate problems. The hardest failures, and the most consequential wins, live precisely where they interact. That through-line is what Release It! is fundamentally about. The vocabulary it introduced — circuit breakers, bulkheads, stability patterns — is now standard in how the industry discusses reliability, and the book is widely cited as foundational to DevOps and cloud-native practice. At Nubank, he led the Data Business Unit with over $300 million in annual spend, then served as Chief Architect with reach across 2,500 engineers while the customer base grew from 75 million to 125 million across Brazil, Mexico, and Colombia. Results included cutting data-platform spend roughly 50% year-over-year, improving on-time data availability past 99%, building governance aligned with LGPD, GDPR, and CCPA, moving team engagement from the bottom decile to the 60th percentile, and rolling out AI coding tools to more than 90% of engineers without customer-visible quality regression. At Sabre, as part of the CTO office, he helped lead development-practice modernization, GCP migration strategy, mainframe offload architecture, technical diligence, and divestiture architecture across thousands of applications and hundreds of products. He is most effective when the stakes are real, the system is sociotechnical, and the solution must hold across architecture, execution, economics, and organizational behavior. LinkedIn: https://www.linkedin.com/in/mtnygard/ Personal Blog & Website: https://www.michaelnygard.com GitHub: https://github.com/mtnygard Twitter/X: https://x.com/mtnygard Release It! (Pragmatic Programmers): https://pragprog.com/titles/mnee2/release-it-second-edition/ 97 Things Every Software Architect Should Know (O'Reilly): https://www.oreilly.com/library/view/97-things-every/9780596800611/ Goodreads Author Page: https://www.goodreads.com/author/show/6089.Michael_T_Nygard LinkedIn Articles: https://www.linkedin.com/today/author/mtnygard Presentations Archive: https://github.com/mtnygard/presentations/wiki Want to Learn More? Visit AzureDevOps.Show for show notes and additional episodes.

ai mexico brazil ceos colombia results cto gdpr github devops ccpa ctos chief architect gcp lgpd release it pragmatic programmers michael nygard

The PHP Podcast 2026.07.16

Play Episode Listen Later Jul 17, 2026 71:32

PHP Podcast – July 16, 2026 Hosts: Joe Ferguson, Sara Golemon, and Holly Schilling Joe hosts with Sarah and Holly while running on no sleep. The PHP Tech 2027 CFP opens, a fake PHP 9 pitch appears, we crown Holly the accidental main character of internals, and everyone agrees dark mode flashing white is a war crime. PHP Tech 2027 CFP Is Open (And Yes, the Year Is Right This Time) The big news kicking off the show is that the PHP Tech CFP for 2027 is live and open. You can find it over at Sessionize under php-tech-2027, and unlike a certain demo from the previous week, the date on it is actually correct. There was a brief moment where it displayed 2007, but the team fixed that rather quickly, so credit where credit is due. The crew marveled at the fact that we are somehow less than six months out from 2027, which spiraled into a conversation about kids getting learner’s permits, full beards showing up on children who were toddlers just yesterday, and whether anyone’s offspring might actually submit a talk. Helldivers came up. Freedom was spread. And there was a gentle suggestion that SoCalKid and their newly engaged fiancé should be sent the CFP URL immediately. Meanwhile, PHP Tech 2026 videos are rolling out on PHP Tech TV. There are currently 37 available with more still processing thanks to some technical and room issues at the event. Several talks are completely free, including Joe’s talk on modernizing DevOps, Kaylin’s “Modernize Your Old School Endpoints with HTMX,” and both of Ben Ramsey’s talks. Working Groups, Discord, and the People Who Actually Care The conversation turned to the internals process and Ben Ramsey’s working group proposal on the internals mailing list, which the crew encouraged everyone to actually read. The idea of giving working groups some autonomy and even decision-making power drew broad agreement as a way to produce more fully-fleshed RFCs rather than one person’s implementation of a giant feature. A recurring point of confusion is the reference to “Discord conversations” in RFCs. There is no official PHP.net Discord, but phpc.chat will get you to the Discord (and previously the bridged IRC). The PHP Internals channel is where a lot of discussion happens, though far from the only place, and there are also the PHP Foundation and new Foundation Ambassadors channels. Big appreciation went out to the moderators keeping that Discord spam-free and troll-free, with a special shout to Tiffany, who is an absolute machine at helping people, pointing them in the right direction, and posting top-tier cat pictures in the pet flexing channel. The recurring theme: decisions are made by the people who show up. Silence is acquiescence, and if you have issues, speak up. Holly famously just showed up in internals one day, started talking, and they let her stay. This Week in Internals and the Co-Scientist Show Joe wanted to highlight Artisan Build’s YouTube channel, specifically their “This Week in Internals” videos. They are fantastic recaps of what’s happening in the internals world, complete with a very light sprinkling of extremely dry comedic timing that lands perfectly. The videos break down email threads and RFCs into easily digestible summaries of what people are arguing over, then poke a little fun at the sillier arguments. A weekly recap drops regularly and it’s consistently great content for anyone curious about internals. The crew was also impressed by the host’s ability to nail every name pronunciation on what seems like the first try, which spiraled into Holly’s confession that she has a hard memory limit on names learned after kindergarten. Anyone new is simply “out of bounds.” Holly’s Fake PHP 9 Pitch: Structs, Modules, and Surfaces Holly walked through a blog post on eventuallywrong.com featuring a fake PHP 9 pitch full of flagship features she’s prototyped. It kicked off with extensions, which she discovered didn’t exist while trying to build the Longhorn app in native PHP, landing her at the top of that internals video. Next came structs, which started as an attempt to build tuples (turns out full structs were easier). They’re Swift-style value types with strong typing, and after some grumbling at Larry, she reworked things to support interfaces and traits, leaning into composition over inheritance. Modules got the PHP-style treatment: a simple module definition, a public interface declaration, and a new `internal` visibility level that lets members be accessed within the same module. No autoloader modifications required, and reflection remains the escape hatch as always. Finally, surfaces — a keyword that adds a perpendicular-to-visibility scope. A method can belong to a surface, and callers simply declare they want to use that surface of the class. Holly performance-tested it: no impact if unused, minimal impact if used. She also spent a good chunk of the show against friend classes, arguing they’re leaky, unrestricted, and if you’re going to hand out full access to your privates, you shouldn’t have marked them private in the first place. Release Management, Version Stats, and Upgrade Paths Holly is a first-time PHP 8.6 release manager alongside Matteo Beccati, with veteran Daniel Scherzer (also on 8.5) rounding out the team. She stepped down from RM in a prior election because others wanted the work — a reminder that people stepping up in open source is a rarity worth celebrating. Release management, she noted, is less a social job and more about moving data at the right time and signing things. The July 2026 PHP version stats got a thumbs up. Looking at the trends, 8.5 is clearly on the rise, 8.4 climbing slightly, 8.3 starting to trend down, and 8.2 falling harder — exactly the curve you want, with the vast majority sitting inside the support window. Joe shared that upgrading apps from PHP 7 to 8.3/8.4/8.5 has been a much easier lift than the older 7.x hops, thanks to a more consistent release cadence and better deprecation guidance. Holly pushed back on the idea that 5.6-to-7 was ever hard, while Joe pointed out the real pain came from jumping ancient 5.0/5.1 codebases straight to 7 back before Claude existed. There was also a very in-depth debugging tangent about an opcache build flag no longer being needed on 8.5. Accessibility, Dark Mode Crimes, and the JetBrains Survey The JetBrains State of PHP survey is open, and everyone should go take it — there’s even a chance to win one of five vouchers. This led to a discussion about whether JetBrains usage is being decimated by AI tooling, with Holly living almost entirely in the terminal with Claude Code these days while Joe remains loyal to PHPStorm and PyCharm. Sarah, who is going blind and is not joking about it, kicked off a passionate segment on accessibility. Test your apps with a screen reader. Respect font scaling and contrast (F0F0F0 text on white is a genuine crime). Respect the OS toggles for reduced motion, because autistic users and others depend on them and apps routinely ignore them. The crew then united around dark mode etiquette: the only reasonable default is system-selected, and the white flash between two dark-mode pages is caused by JavaScript-based theme switching instead of sane CSS selectors. It is, universally agreed, the worst. The episode closed on eye-tracking privacy (Apple Vision Pro good, Oculus terrifying), heat maps, and a laptop-camera-covering tangent that got appropriately unhinged before Joe called it on that bombshell. Links from the show: PHP Tech 2027 CFP — Now open on Sessionize eventuallywrong.com — Holly’s fake PHP 9 pitch phpc.chat — Get to the PHP Discord store.phparch.com — Now with socks Hosts: Joe Ferguson X: @shocm Mastodon: @joepferguson@social.social PHPArch.me: @svpernova09 Sara Golemon Mastodon: @pollita@phpc.social Holly Schilling Mastodon: @TheCodeLorax@tech.lgbt Streams: Youtube Channel Twitch Connect & Hire PHP Architect Website Twitter/X Mastodon Hire PHP Developers Looking to hire PHP developers? Email support@phparch.com – Joe and the team are available for consulting, infrastructure work, Ansible playbooks, and code review. Partner This podcast is made a little better thanks to our partners PHP Architect Consulting Your PHP codebase deserves a partner, not a contractor PHP Architect provides long-term technical partnerships for organizations that need senior-level PHP expertise that you can depend on https://www.phparch.com/consulting/ Displace Infrastructure Management, Simplified Automate Kubernetes deployments across any cloud provider or bare metal with a single command. Deploy, manage, and scale your infrastructure with ease. https://displace.tech/ OurCVEs Your security posture, on autopilot with OurCVEs CodeRabbit Cut code review time & bugs in half instantly with CodeRabbit. Music Provided by Epidemic Sound https://www.epidemicsound.com/ Join Us Live Next Week Youtube Channel Got feedback? Join us on Discord at discord.phparch.com The post The PHP Podcast 2026.07.16 appeared first on PHP Architect.

ai freedom silence respect os discord swift accessibility cfp oculus devops javascript apple vision pro css longhorns php deploy rm helldivers epidemic sound irc modules ansible jetbrains music provided internals rfcs htmx working groups pycharm phpstorm ben ramsey

Signals & Levers • Elisabeth Hendrickson, Joel Tosi & Charles Humble

GOTO - Today, Tomorrow and the Future

Play Episode Listen Later Jul 17, 2026 63:06

This interview was recorded for the GOTO Book Club.http://gotopia.tech/bookclubElisabeth Hendrickson - Advisor, Coach, Speaker & Co-Author of "Signals & Levers"Joel Tosi - Co-Founder & CTO at Dojo & Co & Co-Author of "Signals & Levers"Charles Humble - Freelance Techie, Podcaster, Editor, Author & ConsultantCheck out more here:https://gotopia.tech/episodes/448RESOURCESElisabethhttps://ruby.social/@testobsessedhttps://github.com/testobsessedhttps://www.linkedin.com/in/testobsessedhttps://curiousduck.ioJoelhttps://mastodon.social/@joeltosihttps://www.linkedin.com/in/joel-tosi-531a3bCharleshttps://bsky.app/profile/charleshumble.bsky.socialhttps://linkedin.com/in/charleshumblehttps://mastodon.social/@charleshumblehttps://conissaunce.comLinkshttps://ruthmalan.comhttp://www.ask-force.org/web/Discourse/Rittel-Dilemmas-General-Theory-Planning-1973.pdfDESCRIPTIONElisabeth Hendrickson and Joel Tosi open by explaining why systems thinking is having a moment right now: organizations that went all-in on Agile and DevOps are finding those returns plateauing, and the rise of AI is forcing engineering teams to reexamine where their real bottlenecks are. The book, Signals & Levers, gives software engineers a practical vocabulary and toolkit for that examination. A core insight is that most organizational dysfunction isn't caused by bad people or bad intentions, but by systems that produce bad outcomes predictably and structurally. The named archetypes in the book — over 20 of them, covering patterns like escalating technical debt, the "fixes that fail" loop, and the boiling frog — give teams a shared language to recognize and reason about those patterns without having to discover them from scratch.The most practically actionable section of the conversation covers signals versus levers: understanding the difference between information (a signal) and an intervention point (a lever) is the foundation for making changes that actually work rather than changes that feel productive and achieve nothing. On AI, both authors are cautious in the right ways: Elisabeth uses it daily as a thinking partner but keeps herself firmly at the steering wheel. Joel's warning is starker — AI amplifies whatever is already true about your organization, including dysfunction, and if it lets you ship faster than you can learn, the consequences may be severe. The book closes with an exercise for the reader: if AI doubles your delivery speed, what happens when you can ship faster than you can adapt?RECOMMENDED BOOKSElisabeth Hendrickson & Joel Tosi • Signals & Levers • https://amzn.to/4g6Fb3CDiana Montalion • Learning Systems Thinking • https://amzn.to/3ZpycdJDon Norman • The Design of Everyday Things • https://amzn.to/4fV6QVlGene Kim • The Unicorn Project • https://amzn.to/3woXQDzGene Kim, Kevin Behr & George Spafford • The Phoenix Project • https://amzn.to/3X9cYxaPeter Degrace & Leslie Hulet Stahl • Wicked Problems, Righteous Solutions • https://amzn.to/3ScP0D9Frederick Brooks Jr. • The Mythical Man-Month • https://amzn.to/4gd10OVGerald Weinberg • An Introduction to General Systems Thinking • https://amzn.to/4dZCsaODonella H. Meadows • Thinking in Systems • https://amzn.to/3XtqYCVBlueskyInstagramLinkedInFacebookCHANNEL MEMBERSHIP BONUSJoin this channel to get early access to videos & other perks:https://www.youtube.com/channel/UCs_tLP3AiwYKwdUHpltJPuA/joinLooking for a unique learning experience?Attend the next GOTO conference near you! Get your ticket: gotopia.techSUBSCRIBE TO OUR YOUTUBE CHANNEL - new videos posted daily!

Agentic DevOps at AWS

Software Engineering Daily

Play Episode Listen Later Jul 16, 2026 49:25

ai aws devops agentic software engineering daily

Agentic DevOps at AWS

JavaScript – Software Engineering Daily

Play Episode Listen Later Jul 16, 2026 51:56

AI agents have become capable of reasoning across large amounts of data, calling tools, and taking sequences of actions autonomously. These qualities make them well suited to some of the most persistent pain points in DevOps, including the on-call engineer woken at 3 AM to diagnose an incident, the build failure that takes hours to trace back to a root cause, and the operational toil of modern software delivery. Agentic DevOps is the emerging paradigm that applies these capabilities to the full software lifecycle, with the goal of matching the velocity of modern software delivery with an equally capable operational layer. Neha Gaswamy leads Agentic DevOps at AWS and has been at Amazon for over twenty years. In this episode, she joins Matt Merrill to discuss the AWS approach to agentic DevOps, how Amazon dogfoods its own DevOps tooling, how their DevOps agent works from alarm to root cause, why determinism still matters in an agentic world, creative MCP integrations customers are building, and what the future holds for SRE engineers as agents take on more of the operational work. Sponsorship inquiries: sponsor@softwareengineeringdaily.com The post Agentic DevOps at AWS appeared first on Software Engineering Daily.

amazon ai aws devops agentic mcp sre software engineering daily

RR017: Engineering the impossible with quantum computing, Jonathan Owens, GE Vernova

Cloud Realities

Play Episode Listen Later Jul 16, 2026 48:39

Quantum materials discovery shows how quantum computing can create real value in industry by working alongside AI, advanced computing, and experiments to better understand materials, improve decision-making, and accelerate innovation at scale, ultimately helping deliver practical, measurable progress for the energy transition.This week, Dave, Esmee, and Rob are joined by co-host and quantum expert Phalgun Lolur, together with Jonathan Owens, Senior Scientist in Computational Materials Physics at GE Vernova to explore how quantum computing could reshape materials discovery and why that matters for the future of energy. TLDR00:00 – Introduction01:50 – Hang out: The wet-bulb thermometer03:20 – Dig in: Technology Convergence and the Link to Quantum11:30 – Conversation with Jonathan Owens44:26 – Exciting to see how the quantum landscape matures and the magic wand for magnetismGuestJonathan Owens: https://www.linkedin.com/in/jonathan-r-owens-phd/ HostsDave Chapman: https://www.linkedin.com/in/chapmandr/Esmee van de Giessen: https://www.linkedin.com/in/esmeevandegiessen/Rob Kernahan: https://www.linkedin.com/in/rob-kernahan/Co-host Phalgun Lolur: https://www.linkedin.com/in/phalgun-lolur/ ProductionMarcel van der Burg: https://www.linkedin.com/in/marcel-vd-burg/Dave Chapman: https://www.linkedin.com/in/chapmandr/ SoundBen Corbett: https://www.linkedin.com/in/ben-corbett-3b6a11135/Louis Corbett: https://www.linkedin.com/in/louis-corbett-087250264/ 'Realities Remixed' is an original podcast from Capgemini

The End of DevOps and the Rise of Autonomous Cloud with Hyphen AI CEO Jared Wray

Shift AI Podcast

Play Episode Listen Later Jul 16, 2026 35:45

In this episode of Shift AI, Jared Wray, CEO and co-founder of Hyphen, joins host Boaz Ashkenazy for a wide-ranging conversation on how AI is poised to eliminate the complexity of cloud infrastructure and the DevOps role entirely.Jared shares his unconventional career journey from growing up in a small town in Idaho, where technology barely existed, to washing dishes at 15, teaching himself programming at the local ISP, and eventually founding five startups across cloud computing, energy tech, and developer infrastructure. From bootstrapping Tier 3 (acquired by CenturyLink) to co-founding Palmetto, now one of the largest energy lenders in the nation, Jared's path has been defined by a passion for solving infrastructure problems.The conversation dives deep into why DevOps has become painfully complex, with developers needing to glue together seven to thirteen different services just to deploy a single application across providers like AWS, Google Cloud, and Cloudflare. Jared explains how Hyphen is using AI to abstract away this complexity by asking developers only for business rules like uptime requirements and performance needs, then letting the AI determine the right architecture, deploy it, and operate it autonomously.Boaz and Jared explore why tools like Claude Code and other coding agents still cannot handle the full deployment lifecycle, what it would look like if AI agents replaced PagerDuty by calling you during an outage with a diagnosis and recommendation, and why the future of infrastructure is an autonomous cloud where humans are decision makers and agents handle everything else. The episode closes with a forward-looking discussion on agent-only companies, the death of cloud certifications, and why Jared believes DevOps was a good idea that we ran too long.This episode is essential listening for CTOs, platform engineers, and startup founders who want to understand how AI is moving beyond writing code to fundamentally transforming how software is deployed, operated, and scaled.Chapters[00:00] From Pocatello to Five Startups: Jared's Career Journey[02:49] Building Fonz, Co-founding Palmetto, and Finding Passion in Infrastructure[06:05] Why AI Led Jared Back to Infrastructure with Hyphen[07:05] First Job as a Dishwasher and Breaking Into Tech[08:46] What Is DevOps and Why Does It Exist[10:49] Why Cloud Infrastructure Has Become So Painfully Complex[12:36] How AI Can Apply Best Practices Without Reinventing the Wheel[14:35] The Hyphen Developer Experience: Business Rules Over Architecture[17:14] Why Claude Code and Coding Agents Cannot Solve Infrastructure Yet[20:26] The Full Context Problem: Operating Across Multiple Cloud Providers[23:07] Autonomous Cloud: When Agents Talk to Agents[24:17] Replacing PagerDuty: AI Agents That Call You During Outages[28:47] March Madness, Live Streaming, and Why Five Minutes Feels Like a Lifetime[30:59] Two Words for the Future of Work: Autonomous Cloud[33:20] Agent-Only Companies and Why Humans Will Be CEOs[35:12] DevOps Was a Good Idea We Ran Too Long[35:41] What Is Next for HyphenConnect with Jared WrayLinkedIn: https://www.linkedin.com/in/jaredwray/Email: jw@hyphen.aiConnect with Boaz AshkenazyLinkedIn: https://www.linkedin.com/in/boazashkenazy/Email: info@shiftai.fm

Agentic DevOps at AWS

Open Source – Software Engineering Daily

Play Episode Listen Later Jul 16, 2026 51:56

amazon ai aws devops agentic mcp sre software engineering daily

DKT100 | 100 выпусков DKT и 10 лет ADV-IT празднуем вместе

The DevOps Kitchen Talks's Podcast

Play Episode Listen Later Jul 16, 2026 90:04

Сотый выпуск DevOps Kitchen Talks! Мы на YouTube шесть лет, и вот он, сотый выпуск. А в гости пришёл Денис Астахов, автор канала ADV-IT, у которого в конце июля свой юбилей: десять лет каналу. Получился кухонный разговор авторов двух образовательных каналов, разговор обо всём и ни о чём. Про технику сегодня почти ничего, зато про ремесло, мотивацию и жизнь. О ЧЁМ ВЫПУСК • Как Денис начал канал в 2016-м: пять уроков Python за раз, вдохновение от thenewboston, работа в Intel. • «Знаменитая кухня» DKT: провальные студии и почему запись переехала домой. • Почему самый популярный ролик за 10 лет не про DevOps, а про SSD-диски. • Мотивация и выгорание за десять лет ведения канала. • Честно про монетизацию: падение роста в 10 раз и сколько реально приносит канал на 140к подписчиков. • AI в обучении и найме: можно ли выучить DevOps через нейросеть и не отупеть от копипаста. • Стоит ли сейчас заводить технический YouTube и что для этого нужно. ГОСТЬ Денис Астахов, автор канала ADV-IT (AWS, DevOps, Terraform, Kubernetes, облака). AWS Hero. 10 лет на YouTube. ADV-IT: https://www.youtube.com/@ADV-IT 100 ВЫПУСКОВ Это наш юбилейный сотый выпуск. Скоро проведём праздничный стрим, следите за анонсами в Telegram. ССЫЛКИ

ai telegram intel python podbean aws devops ssd kubernetes terraform davinci resolve dkt aws hero

Agentic DevOps at AWS

Cloud Engineering – Software Engineering Daily

Play Episode Listen Later Jul 16, 2026 51:56

amazon ai aws devops agentic mcp sre software engineering daily

Agentic DevOps at AWS

Podcast – Software Engineering Daily

Play Episode Listen Later Jul 16, 2026 51:56

ai aws devops agentic software engineering daily

D2DO307: Why AI Can't Replace DevOps Fundamentals

ai technology networking cloud infrastructure fundamentals aws ned azure devops andrew brown

Play Episode Listen Later Jul 15, 2026 40:26

Ned and Kyler welcome Andrew Brown, co-founder of ExamPro, to discuss how AI is reshaping the IT education and training landscape. They discuss why foundational technical knowledge remains vital, how AI-generated answers can make mistakes at scale, and the importance of learning how to troubleshoot when automated tools hit their limits. Episode Links: Watch this... Read more »

D2DO307: Why AI Can't Replace DevOps Fundamentals

ai technology networking cloud infrastructure fundamentals aws ned azure devops andrew brown

Play Episode Listen Later Jul 15, 2026 40:26

Securing The Build. Malicious Packages: When Trust in Open Source Breaks. Ben Rieger, Mend.io.

Cybercrime Magazine Podcast

Play Episode Listen Later Jul 15, 2026 9:57

Ben Rieger is the head of DevOps, Security, and IT at Mend.io. In this episode, he joins host Scott Schober to discuss real-world supply chain attacks and what actual defenses can mitigate risk. Securing The Build is brought to you by Mend.io, the leading application security solution, helping organizations reduce application risk efficiently. To learn more about our sponsor, visit https://mend.io.

trust security breaks securing open source devops packages mend malicious rieger scott schober

Why You See Double: Orchestrating Large Scale Code Upgrades With AI | Sourcegraph

FINOS Open Source in Fintech Podcast

Play Episode Listen Later Jul 15, 2026 31:50

Erik Seliger (Lead Product Engineer at Sourcegraph) and Robert Lin (Lead Platform Engineer at Sourcegraph) join FINOS Zenith Project Lead Peter Smulovics to break down the mechanics of Agentic Batch Changes. They reveal how implementing a multi-layered agent architecture solves the high economic cost of pure "vibe coding" by combining deterministic scripting pipelines with localized, token-efficient AI coding models.

new york ai code traditional open source upgrades devops docker large scale orchestrating unbounded finance podcast catch us finos cloud code

D2DO307: Why AI Can't Replace DevOps Fundamentals

Day 2 Cloud

Play Episode Listen Later Jul 15, 2026 40:26

ai technology networking cloud infrastructure fundamentals aws ned azure devops andrew brown

How to see in the dark factory | LaunchDarkly's Cameron Etezadi

Dev Interrupted

Play Episode Listen Later Jul 14, 2026 47:22

The era of the "two-pizza" engineering team is officially dead, replaced by the "two-slice" team and a massive token budget. This week, LaunchDarkly CTO Cameron Etezadi joins the show to explain why traditional guardrails are breaking down and how engineering teams can regain control using runtime agent frameworks. He introduces the concept of the "dark factory," a highly automated assembly line for safely observing, flagging, and deploying AI-generated code to production. The conversation turns to the new ROI of software development, why engineers must now act as frontline managers, and how to navigate the build-versus-buy dilemma in the modern token economy. As AI speeds up how code gets written, the real bottleneck moves downstream to review, testing, and release, where software either delivers measurable value or quietly stalls. Check out the latest research from LinearB on how to measure that value.Life Beyond Tokenmaxxing Workshop: Watch the full replay on demand at linearb.io Follow the show:Subscribe to our Substack Follow us on LinkedInSubscribe to our YouTube ChannelLeave us a ReviewFollow the hosts:Follow AndrewFollow BenFollow DanFollow today's guest:LaunchDarkly AgentControl: Learn how to govern your probabilistic AI with runtime agent frameworks at launchdarkly.com/platform/agent-controlThe Goal by Eliyahu M. Goldratt: Read the quintessential business novel on the theory of constraints at AmazonThe Phoenix Project by Gene Kim: Explore the seminal book on IT, DevOps, and business success at IT RevolutionSimAnt: Dive into the history of the 1991 classic electronic ant colony simulation at Wikipedia.Follow Cameron: LinkedIn OFFERSStart Free Trial: Get started with LinearB's AI productivity platform for free.Book a Demo: Learn how you can ship faster, improve DevEx, and lead with confidence in the AI era.LEARN ABOUT LINEARBAI Code Reviews: Automate reviews to catch bugs, security risks, and performance issues before they hit production.AI & Productivity Insights: Go beyond DORA with AI-powered recommendations and dashboards to measure and improve performance.AI-Powered Workflow Automations: Use AI-generated PR descriptions, smart routing, and other automations to reduce developer toil.MCP Server: Interact with your engineering data using natural language to build custom reports and get answers on the fly.

ai pr roi wikipedia factory devops launchdarkly devex eliyahu m linearb

United Solved IP Exhaustion, You Won't Believe How

TestTalks | Automation Awesomeness | Helping YOU Succeed with Test Automation

Play Episode Listen Later Jul 13, 2026 6:29

AWS Morning Brief for the week of July 13th with Corey Quinn. Links:AWS Security Hub extends unified security management to Microsoft AzureAmazon EKS Auto Mode reduces GPU management fees by up to 60%Amazon RDS for Oracle now supports Oracle Database 26aiAWS Builder Center Now Offers Free Sandbox EnvironmentsAWS Security Hub now offers Network Scanning to identify publicly reachable resourcesAmazon Cognito now supports self-service provisioned API rate limitsAWS Security Hub adds impact analysis for exposure findingsBlazing a Trail: How Peloton Rebuilt the SDLC for the Agentic Era with Amazon BedrockHow United Airlines solved IP exhaustion with Private NAT GatewayBuilding secure AI agents at scale: Introducing Loom for AWSWhat does it cost to answer one question? Measuring per-request cost in agentic workloadsDesigning for the inevitable: System prompt leakage and mitigations in generative AI applicationsThe CISO's guide to post-quantum mandates and migrationsTwo CVEs on the theme of guarding keys badly

amazon ai system cloud ip oracle measuring api aws solved exhaustion devops gpu sdlc corey quinn amazon rds last week in aws

Write the Test First - Robert Prüst on Pester, PSConf, and Learning in Public

The PowerShell Podcast

Play Episode Listen Later Jul 13, 2026 56:16

Andrew sits down with Robert Prüst, a Netherlands-based Microsoft MVP, to geek out about Pester, AI-assisted coding, and the power of showing your work in the PowerShell community. Robert breaks down how Pester works as a testing framework (unit testing, integration testing, and mocking) and explains why testing is the key to trusting AI-generated code. They also dig into a Visual Studio Code extension Robert built for Azure DevOps, the conference culture around PSConf EU, and why community involvement matters as much as technical skill. The conversation wraps with some honest takes on imposter syndrome, learning in public, and the value of just getting started. Key Takeaways: Pester isn't just for unit testing your functions -- it scales all the way up to testing live infrastructure, validating Azure environments, and serving as the backbone of security tools like Maester. The more you invest in it, the more useful it gets. AI-generated code needs a safety net, and Pester is exactly that. Testing gives sysadmins a way to verify what the code is actually doing, which is especially critical when you didn't write it yourself. Imposter syndrome is almost universal in this community, and the people who feel it most are often the ones learning the most. Getting into community spaces -- online or in person -- is one of the fastest ways to grow. Guest Bio: Robert Prüst is a Microsoft MVP and MCT based in the Netherlands, focused on PowerShell, Azure automation, and DevOps. He has around 24 years of professional IT experience and has been working with PowerShell since roughly 2012. Robert is a regular speaker at PSConf EU, blogs at powershellpr0mpt.com, and is active on GitHub under the handle powershellpr0mpt. He runs a custom Azure Engineer bootcamp course and contributes to open source projects including the AMBA and EPAC frameworks. Resource Links: Pester documentation: https://pester.dev Maester: https://maester.dev PSKoans: https://github.com/vexx32/PSKoans PSConfEU: https://psconf.eu PDQ Discord: https://discord.gg/pdq Connect with Andrew: https://andrewpla.tech/links Robert's blog: https://powershellpr0mpt.com Robert on GitHub: https://github.com/powershellpr0mpt Robert on LinkedIn: https://www.linkedin.com/in/rprust/ The PowerShell Podcast on YouTube: https://youtu.be/7Z2Pk0y2Xss

learning ai public write testing netherlands imposters github azure devops mct powershell microsoft mvp amba visual studio code azure devops pester maester epac

DOP 358: Just-in-Time Access for AI Agents

DevOps Paradox

Play Episode Listen Later Jul 8, 2026 50:09

#358: Production is on fire. You need access to one table you have never touched. So you file an access request, then phone the desk to say you filed it, then Slack them to say you phoned, then walk over to say you Slacked. Twenty-five minutes later the incident has resolved itself and the customer has already left. That is the setup, and Ofir Stein has lived the other side of it. He is the CTO and co-founder of Apono, and before that he was an engineering leader who felt the same pain every day - not because he hated security, but because he hated being blocked. There is a difference, and the whole conversation turns on it. Put productivity on one side, security risk on the other, and access management in the middle. Tighten one and you starve the other. Nobody wants to be slower and nobody wants to be breached, so the honest answer is there is no clean answer. Then AI agents show up and break the last assumption standing. Software used to be deterministic - your computer could not decide to do something other than what it was told. LLMs can. They can be socially engineered the way people are. Ofir's team built a full AWS environment run by AI agents, opened a Discord channel, and invited anyone to try to trick them. People could. That is the new attack surface, and it moves at machine speed - far too fast for the access reviews and approval chains built for humans. The guardrails everyone is now scrambling to build for agents should have been there for humans all along. Access is the one thing in your stack that never went dynamic. Servers scale up and down, pipelines rebuild everything, and then access is a static policy someone set two weeks ago when security sat with your manager and guessed what you would need. That is the opposite of how the rest of DevOps works. Ofir's argument is that access should change with context - who you are, whether you are on call, whether there is an open incident - evaluated in real time. For a human that is a faster request. For an AI agent, the decision has to live inside the loop, made by silicon, because no person can approve thousands of operations a minute. If access is per-operation and every operation is already a specific API call, what is left to scope? If the business context changes by the minute, how do you write guardrails in advance? And once the human is out of the loop, are you not just left with one AI deciding what another AI is allowed to do? Ofir does not pretend that part is solved. What he is sure of is the direction: the doors at the mall open when you walk up and close when you leave, and you never think about them. That is where access is headed - and there is a lot of road between here and there. Ofir's contact information: LinkedIn: https://www.linkedin.com/in/ofir-stein/ YouTube channel: https://youtube.com/devopsparadox Review the podcast on Apple Podcasts: https://www.devopsparadox.com/review-podcast/ Slack: https://www.devopsparadox.com/slack/ Connect with us at: https://www.devopsparadox.com/contact/

ai production software discord twenty cto slack api aws devops servers tighten ofir

Agentic Engineering for Testers: How to Automate Your Way to the Top with Amit Rawat

Play Episode Listen Later Jul 7, 2026 43:30

Amit Rawat is an agentic engineer who spent two decades in QA before shifting fully into building AI agents. He's the creator of PromptWright, a desktop tool that turns natural language prompts into automated Playwright browser tests, complete with screen recording, Gherkin scenario generation, and self-healing locators. In this episode, Amit and Joe get into what it actually takes to work with AI agents at a high level, starting with why the planning phase matters more than the prompt itself. Amit breaks down his own workflow, brainstorming with AI, building a detailed plan in HTML before ever executing, and why curiosity and technical depth still matter even as AI gets more capable. They also cover why Amit believes QA professionals, more than developers or DevOps engineers, are best positioned to thrive in the agentic era, how he tracks the ROI on his $200-a-month Claude subscription, the "Chief of Staff," "Chief Health Officer," and "Chief Financial Officer" AI agents he's built to help manage different aspects of his personal life, and how he uses a memory layer so those agents understand his preferences and become more useful over time. If you're a tester, automation engineer, or QA leader trying to figure out where AI agents fit into your workflow and your career, this conversation is a practical look at what's already working today.

ai chief engineering roi automate qa devops playwright html amit agentic testers gherkin rawat

AWS Discovers ACME Isn't Just Roadrunner Stuff