Podcasts about gocd

Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/discourse-sns-rce-a-stored-xss-in-gitlab-and-a-reddit-race-condition.html A couple unique vulns this week involving getting extra coins on Reddit, and bypassing certificate checking for a Discourse RCE. [00:00:40] Agent 007: Pre-Auth Takeover of Build Pipelines in GoCD [00:09:50] Race condition leads to Inflation of coins when bought via Google Play Store [00:15:11] [GitLab] Stored XSS in Mermaid when viewing Markdown files [00:33:28] Discourse SNS webhook RCE [00:47:28] [GitLab] Stored XSS in Mermaid when viewing Markdown files The DAY[0] Podcast episodes are streamed live on Twitch (@dayzerosec) twice a week: Mondays at 3:00pm Eastern (Boston) we focus on web and more bug bounty style vulnerabilities Tuesdays at 7:00pm Eastern (Boston) we focus on lower-level vulnerabilities and exploits. The Video archive can be found on our Youtube channel: https://www.youtube.com/c/dayzerosec You can also join our discord: https://discord.gg/daTxTK9 Or follow us on Twitter (@dayzerosec) to know when new releases are coming.

We kick it and kiki about Keeping up with Kharjot, personal space, and the Human Resource arts.

A PI-powered Plan 9 cluster, an SSH tarpit, rdist for when Ansible is too much, falling in love with OpenBSD again, how I created my first FreeBSD port, the Tilde Institute of OpenBSD education and more. Headlines A Pi-Powered Plan 9 Cluster Plan 9 from Bell Labs comes from the same stable as the UNIX operating system, which of course Linux was designed after, and Apple’s OS X runs on top of a certified UNIX operating system. Just like UNIX, Plan 9 was developed as a research O/S — a vehicle for trying out new concepts — with it building on key UNIX principles and taking the idea of devices are just files even further. In this post, we take a quick look at the Plan 9 O/S and some of the notable features, before moving on to the construction of a self-contained 4-node Raspberry Pi cluster that will provide a compact platform for experimentation. Endlessh: an SSH Tarpit I’m a big fan of tarpits: a network service that intentionally inserts delays in its protocol, slowing down clients by forcing them to wait. This arrests the speed at which a bad actor can attack or probe the host system, and it ties up some of the attacker’s resources that might otherwise be spent attacking another host. When done well, a tarpit imposes more cost on the attacker than the defender. The Internet is a very hostile place, and anyone who’s ever stood up an Internet-facing IPv4 host has witnessed the immediate and continuous attacks against their server. I’ve maintained such a server for nearly six years now, and more than 99% of my incoming traffic has ill intent. One part of my defenses has been tarpits in various forms. News Roundup rdist(1) – when Ansible is too much The post written about rdist(1) on johan.huldtgren.com sparked us to write one as well. It's a great, underappreciated, tool. And we wanted to show how we wrapped doas(1) around it. There are two services in our infrastructure for which we were looking to keep the configuration in sync and to reload the process when the configuration had indeed changed. There is a pair of nsd(8)/unbound(8) hosts and a pair of hosts running relayd(8)/httpd(8) with carp(4) between them. We didn't have a requirement to go full configuration management with tools like Ansible or Salt Stack. And there wasn't any interest in building additional logic on top of rsync or repositories. > Enter rdist(1), rdist is a program to maintain identical copies of files over multiple hosts. It preserves the owner, group, mode, and mtime of files if possible and can update programs that are executing. Falling in love with OpenBSD again I was checking the other day and was appalled at how long it has been since I posted here. I had been working a job during 2018 that had me traveling 3,600 miles by air every week so that is at least a viable excuse. So what is my latest project? I wanted to get something better than the clunky old T500 “freedom laptop” that I could use as my daily driver. Some background here. My first paid gig as a programmer was on SunOS 4 (predecessor to Solaris) and Ultrix (on a DEC MicroVAX). I went from there to a Commodore Amiga (preemptive multitasking in 1985!). I went from there to OS/2 (I know, patron saint of lost causes) and then finally decided to “sell out” and move to Windows as the path of least resistance in the mid 90’s. My wife bought me an iPod literally just as they started working with computers other than Macs and I watched with fascination as Apple made the big gamble and moved away from PowerPC chips to Intel. That was the beginning of the Apple Fan Boi years for me. My gateway drug was a G4 MacMini and I managed somehow to get in on the pre-production, developer build of an Intel-based Mac. I was quite happy on the platform until about three years ago. How I Created My First FreeBSD Port I created my first FreeBSD port recently. I found that FreeBSD didn't have a port for GoCD, which is a continuous integration and continuous deployment (CI/CD) system. This was a great opportunity to learn how to build a FreeBSD port while also contributing back to the community The Tilde Institute of OpenBSD Education Welcome to tilde.institute! This is an OpenBSD machine whose purpose is to provide a space in the tildeverse for experimentation with and education of the OpenBSD operating system. A variety of editors, shells, and compilers are installed to allow for development in a native OpenBSD environment. OpenBSD's httpd(8) is configured with slowcgi(8) as the fastcgi provider and sqlite3 available. This allows users to experiment with web development using compiled CGI in C, aka the BCHS Stack. In addition to php7.0 and mysql (mariadb) by request, this provides an environment where the development of complex web apps is possible. Beastie Bits SoloBSD 19.03-STABLE WireGuard for NetBSD [NetBSD - Removing PF](https://mail-index.netbsd.org/tech-kern/2019/03/29/msg024883.html ) What does the N in nmake stand for? A Map of the Internet from May 1973 NSA-B-Gone : A sketchy hardware security device for your x220 Feedback/Questions Jake - A single jail as a VPN client Matt - Surprising BSD Features cia - Routing and ZFS Send questions, comments, show ideas/topics, or stories you want mentioned on the show to feedback@bsdnow.tv Your browser does not support the HTML5 video tag.

RR 314 DynamoDB on Rails with Chandan Jhunjhunwal Today's Ruby Rogues podcast features DynamoDB on Rails with Chandan Jhunjhunwal. DynamoDB is a NoSQL database that helps your team solve managing infrastructure issues like setup, costing and maintenance. Take some time to listen and know more about DynamoDB! [00:02:18] – Introduction to Chandan Jhunjhunwal Chanchan Jhunjhunwal is an owner of Faodail Technology, which is currently helping many startups for their web and mobile applications. They started from IBM, designing and building scalable mobile and web applications. He mainly worked on C++ and DB2 and later on, worked primarily on Ruby on Rails. Questions for Chandan [00:04:05] – Introduction to DynamoDB on Rails I would say that majority of developers work in PostgreSQL, MySQL or other relational database. On the other hand, Ruby on Rails is picked up by many startup or founder for actually implementing their ideas and bringing them to scalable products. I would say that more than 80% of developers are mostly working on RDBMS databases. For the remaining 20%, their applications need to capture large amounts of data so they go with NoSQL. In NoSQL, there are plenty of options like MongoDB, Cassandra, or DynamoDB. When using AWS, there’s no provided MongoDB. With Cassandra, it requires a lot of infrastructure setup and costing, and you’ll have to have a team which is kind of maintaining it on a day to day basis. So DynamoDB takes all those pain out of your team and you no longer have to focus on managing the infrastructure. [00:07:35] – Is it a good idea to start with a regular SQL database and then, switch to NoSQL database or is it better to start with NoSQL database from day one? It depends on a couple of factors. For many of the applications, they start with RDBMS because they just want to get some access, and probably switch to something like NoSQL. First, you have to watch the incoming data and their capacity. Second is familiarity because most of the developers are more familiar with RDBMS and SQL queries. For example, you have a feed application, or a messaging application, where you know that there will be a lot of chat happening and you’d expect that you’re going to take a huge number of users. You can accommodate that in RDBMS but I would probably not recommend that. [00:09:30] Can I use DynamoDB as a caching mechanism or cache store? I would not say replacement, exactly. On those segments where I could see that there’s a lot of activity happening, I plugged in DynamoDB. The remaining part of the application was handled by RDBMS. In many applications, what I’ve seen is that they have used a combination of them. [00:13:05] How do you decide if you actually want to use DynamoDB for all the data in your system? The place where we say that this application is going to be picked from day one is where the number of data which will be coming will increase. It also depends on the development team that you have if they’re familiar with DynamoDB, or any other NoSQL databases. [00:14:50] Is DynamoDB has document store or do you have of columns? You can say key value pairs or document stores. The terminologies are just different and the way you design the database. In DynamoDB, you have something like hash key and range key. [00:22:10] – Why don’t we store images in the database? I would say that there are better places to store the, which is faster and cheaper. There are better storage like CDN or S3. Another good reason is that if you want to fetch a proper size of image based on the user devices screen, resizing and all of the stuff inside the database could be cumbersome. You’ll repeat adding different columns where we’ll be storing those different sizes of images. [00:24:40] – Is there a potentially good reason for NoSQL database as your default go-to data store? If you have some data, which is complete unstructured, if you try to store back in RDBMS, it will be a pain. If we talk about the kind of media which gets generated in our day to day life, if you try to model them in a relational database, it will be pretty painful and eventually, there will be a time when you don’t know how to create correlations. [00:28:30] – Horizontally scalable versus vertically scalable In vertically scalable, when someone posts, we keep adding that at the same table. As we add data to the table, the database size increases (number of rows increases). But in horizontally scalable, we keep different boxes connected via Hadoop or Elastic MapReduce which will process the added data. [00:30:20] – What does it take to hook up a DynamoDB instance to a Rails app? We could integrate DynamoDB by using the SDK provided by AWS. I provided steps which I’ve outlined in the blog - how to create different kinds of tables, how to create those indexes, how to create the throughput, etc. We could configure AWS SDK, add the required credential, then we could create different kinds of tables. [00:33:00] – In terms of scaling, what is the limit for something like PostgreSQL or MySQL, versus DynamoDB? There’s no scalability limit in DynamoDB, or any other NoSQL solutions. Picks David Kimura             CorgUI Jason Swett      Database Design for Mere Mortals Charles Maxwood VMWare Workstation GoCD Ruby Rogues Parley Ruby Dev Summit Chandan Jhunjhunwal      Twitter @ChandanJ chandan@faodailtechnology.com

RR 314 DynamoDB on Rails with Chandan Jhunjhunwal Today's Ruby Rogues podcast features DynamoDB on Rails with Chandan Jhunjhunwal. DynamoDB is a NoSQL database that helps your team solve managing infrastructure issues like setup, costing and maintenance. Take some time to listen and know more about DynamoDB! [00:02:18] – Introduction to Chandan Jhunjhunwal Chanchan Jhunjhunwal is an owner of Faodail Technology, which is currently helping many startups for their web and mobile applications. They started from IBM, designing and building scalable mobile and web applications. He mainly worked on C++ and DB2 and later on, worked primarily on Ruby on Rails. Questions for Chandan [00:04:05] – Introduction to DynamoDB on Rails I would say that majority of developers work in PostgreSQL, MySQL or other relational database. On the other hand, Ruby on Rails is picked up by many startup or founder for actually implementing their ideas and bringing them to scalable products. I would say that more than 80% of developers are mostly working on RDBMS databases. For the remaining 20%, their applications need to capture large amounts of data so they go with NoSQL. In NoSQL, there are plenty of options like MongoDB, Cassandra, or DynamoDB. When using AWS, there’s no provided MongoDB. With Cassandra, it requires a lot of infrastructure setup and costing, and you’ll have to have a team which is kind of maintaining it on a day to day basis. So DynamoDB takes all those pain out of your team and you no longer have to focus on managing the infrastructure. [00:07:35] – Is it a good idea to start with a regular SQL database and then, switch to NoSQL database or is it better to start with NoSQL database from day one? It depends on a couple of factors. For many of the applications, they start with RDBMS because they just want to get some access, and probably switch to something like NoSQL. First, you have to watch the incoming data and their capacity. Second is familiarity because most of the developers are more familiar with RDBMS and SQL queries. For example, you have a feed application, or a messaging application, where you know that there will be a lot of chat happening and you’d expect that you’re going to take a huge number of users. You can accommodate that in RDBMS but I would probably not recommend that. [00:09:30] Can I use DynamoDB as a caching mechanism or cache store? I would not say replacement, exactly. On those segments where I could see that there’s a lot of activity happening, I plugged in DynamoDB. The remaining part of the application was handled by RDBMS. In many applications, what I’ve seen is that they have used a combination of them. [00:13:05] How do you decide if you actually want to use DynamoDB for all the data in your system? The place where we say that this application is going to be picked from day one is where the number of data which will be coming will increase. It also depends on the development team that you have if they’re familiar with DynamoDB, or any other NoSQL databases. [00:14:50] Is DynamoDB has document store or do you have of columns? You can say key value pairs or document stores. The terminologies are just different and the way you design the database. In DynamoDB, you have something like hash key and range key. [00:22:10] – Why don’t we store images in the database? I would say that there are better places to store the, which is faster and cheaper. There are better storage like CDN or S3. Another good reason is that if you want to fetch a proper size of image based on the user devices screen, resizing and all of the stuff inside the database could be cumbersome. You’ll repeat adding different columns where we’ll be storing those different sizes of images. [00:24:40] – Is there a potentially good reason for NoSQL database as your default go-to data store? If you have some data, which is complete unstructured, if you try to store back in RDBMS, it will be a pain. If we talk about the kind of media which gets generated in our day to day life, if you try to model them in a relational database, it will be pretty painful and eventually, there will be a time when you don’t know how to create correlations. [00:28:30] – Horizontally scalable versus vertically scalable In vertically scalable, when someone posts, we keep adding that at the same table. As we add data to the table, the database size increases (number of rows increases). But in horizontally scalable, we keep different boxes connected via Hadoop or Elastic MapReduce which will process the added data. [00:30:20] – What does it take to hook up a DynamoDB instance to a Rails app? We could integrate DynamoDB by using the SDK provided by AWS. I provided steps which I’ve outlined in the blog - how to create different kinds of tables, how to create those indexes, how to create the throughput, etc. We could configure AWS SDK, add the required credential, then we could create different kinds of tables. [00:33:00] – In terms of scaling, what is the limit for something like PostgreSQL or MySQL, versus DynamoDB? There’s no scalability limit in DynamoDB, or any other NoSQL solutions. Picks David Kimura             CorgUI Jason Swett      Database Design for Mere Mortals Charles Maxwood VMWare Workstation GoCD Ruby Rogues Parley Ruby Dev Summit Chandan Jhunjhunwal      Twitter @ChandanJ chandan@faodailtechnology.com

RR 314 DynamoDB on Rails with Chandan Jhunjhunwal Today's Ruby Rogues podcast features DynamoDB on Rails with Chandan Jhunjhunwal. DynamoDB is a NoSQL database that helps your team solve managing infrastructure issues like setup, costing and maintenance. Take some time to listen and know more about DynamoDB! [00:02:18] – Introduction to Chandan Jhunjhunwal Chanchan Jhunjhunwal is an owner of Faodail Technology, which is currently helping many startups for their web and mobile applications. They started from IBM, designing and building scalable mobile and web applications. He mainly worked on C++ and DB2 and later on, worked primarily on Ruby on Rails. Questions for Chandan [00:04:05] – Introduction to DynamoDB on Rails I would say that majority of developers work in PostgreSQL, MySQL or other relational database. On the other hand, Ruby on Rails is picked up by many startup or founder for actually implementing their ideas and bringing them to scalable products. I would say that more than 80% of developers are mostly working on RDBMS databases. For the remaining 20%, their applications need to capture large amounts of data so they go with NoSQL. In NoSQL, there are plenty of options like MongoDB, Cassandra, or DynamoDB. When using AWS, there’s no provided MongoDB. With Cassandra, it requires a lot of infrastructure setup and costing, and you’ll have to have a team which is kind of maintaining it on a day to day basis. So DynamoDB takes all those pain out of your team and you no longer have to focus on managing the infrastructure. [00:07:35] – Is it a good idea to start with a regular SQL database and then, switch to NoSQL database or is it better to start with NoSQL database from day one? It depends on a couple of factors. For many of the applications, they start with RDBMS because they just want to get some access, and probably switch to something like NoSQL. First, you have to watch the incoming data and their capacity. Second is familiarity because most of the developers are more familiar with RDBMS and SQL queries. For example, you have a feed application, or a messaging application, where you know that there will be a lot of chat happening and you’d expect that you’re going to take a huge number of users. You can accommodate that in RDBMS but I would probably not recommend that. [00:09:30] Can I use DynamoDB as a caching mechanism or cache store? I would not say replacement, exactly. On those segments where I could see that there’s a lot of activity happening, I plugged in DynamoDB. The remaining part of the application was handled by RDBMS. In many applications, what I’ve seen is that they have used a combination of them. [00:13:05] How do you decide if you actually want to use DynamoDB for all the data in your system? The place where we say that this application is going to be picked from day one is where the number of data which will be coming will increase. It also depends on the development team that you have if they’re familiar with DynamoDB, or any other NoSQL databases. [00:14:50] Is DynamoDB has document store or do you have of columns? You can say key value pairs or document stores. The terminologies are just different and the way you design the database. In DynamoDB, you have something like hash key and range key. [00:22:10] – Why don’t we store images in the database? I would say that there are better places to store the, which is faster and cheaper. There are better storage like CDN or S3. Another good reason is that if you want to fetch a proper size of image based on the user devices screen, resizing and all of the stuff inside the database could be cumbersome. You’ll repeat adding different columns where we’ll be storing those different sizes of images. [00:24:40] – Is there a potentially good reason for NoSQL database as your default go-to data store? If you have some data, which is complete unstructured, if you try to store back in RDBMS, it will be a pain. If we talk about the kind of media which gets generated in our day to day life, if you try to model them in a relational database, it will be pretty painful and eventually, there will be a time when you don’t know how to create correlations. [00:28:30] – Horizontally scalable versus vertically scalable In vertically scalable, when someone posts, we keep adding that at the same table. As we add data to the table, the database size increases (number of rows increases). But in horizontally scalable, we keep different boxes connected via Hadoop or Elastic MapReduce which will process the added data. [00:30:20] – What does it take to hook up a DynamoDB instance to a Rails app? We could integrate DynamoDB by using the SDK provided by AWS. I provided steps which I’ve outlined in the blog - how to create different kinds of tables, how to create those indexes, how to create the throughput, etc. We could configure AWS SDK, add the required credential, then we could create different kinds of tables. [00:33:00] – In terms of scaling, what is the limit for something like PostgreSQL or MySQL, versus DynamoDB? There’s no scalability limit in DynamoDB, or any other NoSQL solutions. Picks David Kimura             CorgUI Jason Swett      Database Design for Mere Mortals Charles Maxwood VMWare Workstation GoCD Ruby Rogues Parley Ruby Dev Summit Chandan Jhunjhunwal      Twitter @ChandanJ chandan@faodailtechnology.com

When you put all of the step needed to create good software up on the board, there's a lot of them. It's a lot more than just writing code, or even writing requirements and stories. Around Pivotal, we think of this full, end-to-end process as the circle of code: Ideas → prioritization / planning → coding → deployment → runtime → monitoring → feedback, and back again. Richard and Coté discuss these steps and how organizations are starting to appreciate "the big picture." They also cover some cloud native news: Amazon buying a browser-based IDE, Cloud9; Google expanding their cloud; and Verizon's purchase of Yahoo! News AWS buys Cloud9, makers of a cloud-based IDE. Also Codenvy and the related Eclipse project. Google add West Coast cloud spot. Yahoo! And Verizon love child. Coté's collection of coverage. Main Topic "Circle of Software," Onsi's talk where he outlines this concept: Ideas → prioritization / planning → coding → deployment → runtime → monitoring → feedback, and back again What do Coté and Richard think of this model? Lots of individually popular tools at each stage of the circle … Prioritization: Jira, Pivotal Tracker, Trello, and more Coding → Java/Spring, Node, .NET, Ruby, and more. Plus countless IDEs from IntelliJ to Visual Studio Code to Spring Tool Suite. Not to mention web IDEs. Deployment → Jenkins, Concourse, GoCD, TravisCI, and more. Platform → Pivotal Cloud Foundry, cloud IaaS, containery stuff Monitoring → Datadog, New Relic, Dynatrace, and more. Log storage in Splunk and others. Feedback → Tools like UserVoice Where does friction arise in the handoffs between those stages? Damon Edwards value-stream talk from DevOpsDays Austin 2015. Is anyone currently trying to bridge the gaps? Between which stages? The marriage of tools and culture in making this work If you aren't committed to continuously delivery and using feedback to fuel the next iteration, don't waste your time setting up this machinery Also: SpringOne Platform! Aug 1st to 4th. Use the code pivotal-cote-300 for $300 off registration.

When you put all of the step needed to create good software up on the board, there's a lot of them. It's a lot more than just writing code, or even writing requirements and stories. Around Pivotal, we think of this full, end-to-end process as the circle of code: Ideas → prioritization / planning → coding → deployment → runtime → monitoring → feedback, and back again. Richard and Coté discuss these steps and how organizations are starting to appreciate "the big picture." They also cover some cloud native news: Amazon buying a browser-based IDE, Cloud9; Google expanding their cloud; and Verizon's purchase of Yahoo! News AWS buys Cloud9, makers of a cloud-based IDE. Also Codenvy and the related Eclipse project. Google add West Coast cloud spot. Yahoo! And Verizon love child. Coté's collection of coverage. Main Topic "Circle of Software," Onsi's talk where he outlines this concept: Ideas → prioritization / planning → coding → deployment → runtime → monitoring → feedback, and back again What do Coté and Richard think of this model? Lots of individually popular tools at each stage of the circle … Prioritization: Jira, Pivotal Tracker, Trello, and more Coding → Java/Spring, Node, .NET, Ruby, and more. Plus countless IDEs from IntelliJ to Visual Studio Code to Spring Tool Suite. Not to mention web IDEs. Deployment → Jenkins, Concourse, GoCD, TravisCI, and more. Platform → Pivotal Cloud Foundry, cloud IaaS, containery stuff Monitoring → Datadog, New Relic, Dynatrace, and more. Log storage in Splunk and others. Feedback → Tools like UserVoice Where does friction arise in the handoffs between those stages? Damon Edwards value-stream talk from DevOpsDays Austin 2015. Is anyone currently trying to bridge the gaps? Between which stages? The marriage of tools and culture in making this work If you aren't committed to continuously delivery and using feedback to fuel the next iteration, don't waste your time setting up this machinery Also: SpringOne Platform! Aug 1st to 4th. Use the code pivotal-cote-300 for $300 off registration.

When you put all of the step needed to create good software up on the board, there's a lot of them. It's a lot more than just writing code, or even writing requirements and stories. Around Pivotal, we think of this full, end-to-end process as the circle of code: Ideas → prioritization / planning → coding → deployment → runtime → monitoring → feedback, and back again. Richard and Coté discuss these steps and how organizations are starting to appreciate "the big picture." They also cover some cloud native news: Amazon buying a browser-based IDE, Cloud9; Google expanding their cloud; and Verizon's purchase of Yahoo! News AWS buys Cloud9, makers of a cloud-based IDE. Also Codenvy and the related Eclipse project. Google add West Coast cloud spot. Yahoo! And Verizon love child. Coté's collection of coverage. Main Topic "Circle of Software," Onsi's talk where he outlines this concept: Ideas → prioritization / planning → coding → deployment → runtime → monitoring → feedback, and back again What do Coté and Richard think of this model? Lots of individually popular tools at each stage of the circle … Prioritization: Jira, Pivotal Tracker, Trello, and more Coding → Java/Spring, Node, .NET, Ruby, and more. Plus countless IDEs from IntelliJ to Visual Studio Code to Spring Tool Suite. Not to mention web IDEs. Deployment → Jenkins, Concourse, GoCD, TravisCI, and more. Platform → Pivotal Cloud Foundry, cloud IaaS, containery stuff Monitoring → Datadog, New Relic, Dynatrace, and more. Log storage in Splunk and others. Feedback → Tools like UserVoice Where does friction arise in the handoffs between those stages? Damon Edwards value-stream talk from DevOpsDays Austin 2015. Is anyone currently trying to bridge the gaps? Between which stages? The marriage of tools and culture in making this work If you aren't committed to continuously delivery and using feedback to fuel the next iteration, don't waste your time setting up this machinery Also: SpringOne Platform! Aug 1st to 4th. Use the code pivotal-cote-300 for $300 off registration.

When you put all of the step needed to create good software up on the board, there's a lot of them. It's a lot more than just writing code, or even writing requirements and stories. Around Pivotal, we think of this full, end-to-end process as the circle of code: Ideas → prioritization / planning → coding → deployment → runtime → monitoring → feedback, and back again. Richard and Coté discuss these steps and how organizations are starting to appreciate "the big picture." They also cover some cloud native news: Amazon buying a browser-based IDE, Cloud9; Google expanding their cloud; and Verizon's purchase of Yahoo! News AWS buys Cloud9, makers of a cloud-based IDE. Also Codenvy and the related Eclipse project. Google add West Coast cloud spot. Yahoo! And Verizon love child. Coté's collection of coverage. Main Topic "Circle of Software," Onsi’s talk where he outlines this concept: Ideas → prioritization / planning → coding → deployment → runtime → monitoring → feedback, and back again What do Coté and Richard think of this model? Lots of individually popular tools at each stage of the circle … Prioritization: Jira, Pivotal Tracker, Trello, and more Coding → Java/Spring, Node, .NET, Ruby, and more. Plus countless IDEs from IntelliJ to Visual Studio Code to Spring Tool Suite. Not to mention web IDEs. Deployment → Jenkins, Concourse, GoCD, TravisCI, and more. Platform → Pivotal Cloud Foundry, cloud IaaS, containery stuff Monitoring → Datadog, New Relic, Dynatrace, and more. Log storage in Splunk and others. Feedback → Tools like UserVoice Where does friction arise in the handoffs between those stages? Damon Edwards value-stream talk from DevOpsDays Austin 2015. Is anyone currently trying to bridge the gaps? Between which stages? The marriage of tools and culture in making this work If you aren’t committed to continuously delivery and using feedback to fuel the next iteration, don’t waste your time setting up this machinery Also: SpringOne Platform! Aug 1st to 4th. Use the code pivotal-cote-300 for $300 off registration.

When you put all of the step needed to create good software up on the board, there's a lot of them. It's a lot more than just writing code, or even writing requirements and stories. Around Pivotal, we think of this full, end-to-end process as the circle of code: Ideas → prioritization / planning → coding → deployment → runtime → monitoring → feedback, and back again. Richard and Coté discuss these steps and how organizations are starting to appreciate "the big picture." They also cover some cloud native news: Amazon buying a browser-based IDE, Cloud9; Google expanding their cloud; and Verizon's purchase of Yahoo! News AWS buys Cloud9, makers of a cloud-based IDE. Also Codenvy and the related Eclipse project. Google add West Coast cloud spot. Yahoo! And Verizon love child. Coté's collection of coverage. Main Topic "Circle of Software," Onsi’s talk where he outlines this concept: Ideas → prioritization / planning → coding → deployment → runtime → monitoring → feedback, and back again What do Coté and Richard think of this model? Lots of individually popular tools at each stage of the circle … Prioritization: Jira, Pivotal Tracker, Trello, and more Coding → Java/Spring, Node, .NET, Ruby, and more. Plus countless IDEs from IntelliJ to Visual Studio Code to Spring Tool Suite. Not to mention web IDEs. Deployment → Jenkins, Concourse, GoCD, TravisCI, and more. Platform → Pivotal Cloud Foundry, cloud IaaS, containery stuff Monitoring → Datadog, New Relic, Dynatrace, and more. Log storage in Splunk and others. Feedback → Tools like UserVoice Where does friction arise in the handoffs between those stages? Damon Edwards value-stream talk from DevOpsDays Austin 2015. Is anyone currently trying to bridge the gaps? Between which stages? The marriage of tools and culture in making this work If you aren’t committed to continuously delivery and using feedback to fuel the next iteration, don’t waste your time setting up this machinery Also: SpringOne Platform! Aug 1st to 4th. Use the code pivotal-cote-300 for $300 off registration.