Software Bills of Behavior with Andrew Hendela

Legacy Code Rocks

Player FM - Internet Radio Done Right

97 subscribers

Programming

הוסף לפני nine שנים

תוכן מסופק על ידי Corgibytes LLC, Andrea Goulet, and M. Scott Ford. כל תוכן הפודקאסטים כולל פרקים, גרפיקה ותיאורי פודקאסטים מועלים ומסופקים ישירות על ידי Corgibytes LLC, Andrea Goulet, and M. Scott Ford או שותף פלטפורמת הפודקאסט שלהם. אם אתה מאמין שמישהו משתמש ביצירה שלך המוגנת בזכויות יוצרים ללא רשותך, אתה יכול לעקוב אחר התהליך המתואר כאן https://he.player.fm/legal.

TED Talks Daily

1
Are we cooked? How social media shapes your language | Adam Aleksic 15:16

לפני 14 weeks15:16

הפעל מאוחר יותר

רשימות

לייק

אהבתי

15:16

Gen Z slang is rife with new words like "unalive," "skibidi" and "rizz." Where do these words come from — and how do they get popular so fast? Linguist Adam Aleksic explores how the forces of social media algorithms are reshaping the way people talk and view their very own identities. For a chance to give your own TED Talk, fill out the Idea Search Application: ted.com/ideasearch . Interested in learning more about upcoming TED events? Follow these links: TEDNext: ted.com/futureyou TEDSports: ted.com/sports TEDAI Vienna: ted.com/ai-vienna TEDAI San Francisco: ted.com/ai-sf Hosted on Acast. See acast.com/privacy for more information.…

לפני שנתיים 49:43

MP3•בית הפרקים

Simply knowing what is in your software is not any guarantee of safety. We need to know what that software does versus what we expect it to do. We need to know its rules of behavior.

Today, we talk with Andrew Hendela, a founder of Karambit.ai, a company dedicated to automatically detecting malware and securing your software supply chain. Andrew worked for over a decade automating hard cybersecurity problems. He has many years of experience in cybersecurity leadership and deep technical expertise in fields such as malware analysis and automated cyber attribution. He tells us about software bills of behavior and why SBOMs are insufficient to protect your software supply chain from attacks.

When you finish listening to the episode, connect with Andrew on LinkedIn and visit Karambit.ai website.

Mentioned in this episode:

Andrew on LinkedIn at https://www.linkedin.com/in/andrew-hendela/

Karambit.ai at https://karambit.ai

162 פרקים

#Business #Interviews #Legacycode #Opensource #Opensourcesoftware #Software #Softwaredevelopment #Technology #Corgibytes LLC #Andrea Goulet #Programming #Tech #Software Development #M Scott Ford #Code

Legacy Code Rocks

Software Bills of Behavior with Andrew Hendela

Legacy Code Rocks

97 subscribers

published לפני שנתיים

שתפו

MP3•בית הפרקים

Simply knowing what is in your software is not any guarantee of safety. We need to know what that software does versus what we expect it to do. We need to know its rules of behavior.

When you finish listening to the episode, connect with Andrew on LinkedIn and visit Karambit.ai website.

Mentioned in this episode:

Andrew on LinkedIn at https://www.linkedin.com/in/andrew-hendela/

Karambit.ai at https://karambit.ai

162 פרקים

כל הפרקים

Legacy Code Rocks

1
Innovation in Legacy with Dave Thomas 44:27

לפני 49 weeks44:27

44:27

There are three groups of people around every legacy system - those who are stuck with it, those who don't want to be with it, and those who love it and see its value. How do we reconcile these three opinions and rewrite legacy code without completely replacing it? Today we talk with Dave Thomas . Dave is an all-around player in the software industry with vast experience as an executive, investor, board member, consultant, architect, and engineer. He is Chairman of Bedarra Corp, which provides consulting on technology and business strategy for emerging technology, products, and services. He tells us what the drivers of legacy innovations are, why he thinks refactoring is a "little lie" of the modern software industry, and how to approach modifications in less-than-ideal situations. When you finish listening to the episode, connect with Dave on LinkedIn and visit his website at www.davethomas.net . Mentioned in this episode: Dave Thomas on LinkedIn at https://www.linkedin.com/in/davidathomas/ Dave’s website at https://www.davethomas.net/index.html Badera Corporation at https://www.bedarra.com/…

Legacy Code Rocks

1
Code Reviews with Chelsea Troy 50:16

לפני 1 year50:16

50:16

One of the reasons why it is difficult to work with legacy code is the lack of preserving the contextual reasons for past coding choices. Today we talk with Chelsea Troy, a Machine Learning Team Lead at Mozilla and a computer science lecturer at the University of Chicago. She tells us about the value of code review in the software-building process and why code review should not be treated solely as a mechanism for approval. When you finish listening to the episode, visit Chelsea's website at https://chelseatroy.com . Mentioned in this episode: Chelsea’s website at https://chelseatroy.com…

Legacy Code Rocks

1
Modernizing Code with Edward Hieatt 48:59

לפני 1 year48:59

48:59

Mending code while it is running is risky. One wrong move and a small change can bring the entire system to a halt. Today we talk with Edward Hieatt , Chief Customer Officer at Mechanical Orchard , a GenAI native company that modernizes critical legacy applications without disrupting what they are doing. He tells us how to use AI to identify system dependencies, why it is important to first understand data flow before diving into code, and how to maintain functionality during the modernization process. When you finish listening to the episode, connect with Edward on LinkedIn . Mentioned in this episode: Edward on LinkedIn at https://www.linkedin.com/in/edwardhieatt/ Mechanical Orchard at https://www.mechanical-orchard.com/…

Legacy Code Rocks

1
Mending Code with AI with Ray Myers 58:19

לפני 1 year58:19

58:19

AI proves to be great at writing new code, but what are its capabilities when it comes to mending the old one? Today we talk with Ray Myers , a legacy code expert and sceptical enthusiast for AI. With 16 years of software engineering experience, he focuses on collective lessons learned to improve our existing systems and organizations. He tells us where is the place of AI in legacy code mending, whether AI can provide help when editing existing code, how to train AI with up-to-date coding skills, how to utilize AI when writing tests, and much more. When you finish listening to the episode, make sure to connect with Ray on LinkedIn , visit his website at https://mender.ai , his YouTube channel Craft vs. Cruft , and take a listen to Empathy in Tech - a new podcast cohosted by Ray and Legacy Code Rocks former cohost, Andrea Goulet! Mentioned in this episode: Ray on LinkedIn at https://www.linkedin.com/in/cadrlife/ Craft vs. Cruft at https://www.youtube.com/@craftvscruft8060 Mender website at https://mender.ai Nopilot.dev at https://nopilot.dev Empathy in Tech at https://empathyintech.com Untangler at https://github.com/craftvscruft/untangler…

Legacy Code Rocks

1
Quality-Check of External Dependencies with Feross Aboukhadijeh 45:41

לפני 1 year45:41

45:41

Many of the largest companies rely on third-party code to run critical parts of their software. However, there's often little focus on ensuring the quality of these external dependencies. Today we speak with Feross Aboukhadijeh, CEO and founder of Socket , a developer-first security platform. Socket helps developers and security teams release software faster and reduce time spent on security busywork. Feross is also a lecturer at Stanford, where he teaches CS233 Web Security. We discuss why the quality of third-party dependencies matters, when to start addressing this issue, how to handle unmaintained dependencies, and what tools are available for managing third-party dependencies. After listening to the episode, be sure to visit the Socket website, connect with Feross on Twitter , and check out his personal website . Mentioned in this episode: Socket at https://socket.dev/ Feross on X at https://x.com/feross Feross website at: https://feross.org/…

Legacy Code Rocks

1
From Vintage Computers to Test Automation with Sophia McKeever 56:37

לפני 1 year56:37

56:37

How do the love for vintage computers and test automation come together? Can one inspire another and how? Today we talk with Sophia Mckeever , a software development engineer at Pokemon Company International , a test automation framework architect, and a computer historian. She tells us what led her to collect vintage computers, how they evolved into machines we work on today, and what is the connecting thread between computer history and test automation. When you finish listening to the episode, connect with Sophia on LinkedIn . Mentioned in this episode: Sophia on LinkedIn at https://www.linkedin.com/in/sophiamckeever/…

Legacy Code Rocks

1
Kubescape with Shauli Rozen 39:17

לפני 1 year39:17

39:17

In Kubernetes , security is a joint effort between security engineers and DevOps. A perfect tool to bring these two together is Kubescape , an open-source Kubernetes security project. Today, we talk with Shauli Rozen , the CEO of ARMO , the company behind Kubescape. Shauli has more than fifteen years of experience in technology, B2B management, and business development. He tells us about the advantages of Kubescape, what it does, and when would you want to use it. When you finish listening to the episode, connect with Shauli via LinkedIn , visit the ARMO website, and check out Kubescape . Mentioned in this episode: Shauli on LinkedIn at https://www.linkedin.com/in/shaulirozen/ ARMO at https://www.armosec.io Kubescape at https://www.armosec.io/kubescape/…

Legacy Code Rocks

1
Reviewing Logs with Joe Gross 50:23

לפני 1 year50:23

50:23

Reviewing logs for security threats and operational functions can be a cumbersome task. Attention is a finite resource, and it is easy to miss something when faced with megabytes of data. Today, we talk with Joe Gross , the Director of Solutions Engineering at Graylog , a leading centralized log management solution for capturing, storing, and enabling real-time analysis of terabytes of machine data. Joe guides us through SIEM (Security Information and Event Management), revealing the secrets of how the pros find the needles in the haystack. When you finish listening to the episode, connect with Joe on LinkedIn , check out the Graylog platform , and visit Graylog Open - an online community dedicated to increasing and sharing IT knowledge to solve real-world problems. Mentioned in this episode: Joe on LinkedIn at https://www.linkedin.com/in/joe-gross-se/ Graylog at https://graylog.org Graylog Open at https://graylog.org/products/source-available/…

Legacy Code Rocks

1
Managing Security Services with Scott McCrady 52:11

לפני 2 years52:11

52:11

Cyber security is not a core activity of most software development companies. It is an outsourced activity that simply has to be done so that we can deploy our core services. Today, we talk with Scott McCrady , CEO of SolCyber Managed Security Services and an accomplished international executive with broad experience in sales, business development, and the operations side of a cloud-based and information security-based business. He tells us about the trends in the cybersecurity market and what he expects the future of cybersecurity services to be. When you finish listening to the episode, connect with Scott on LinkedIn and visit the SolCyber website to check out their services and connect with Scott's team. Mentioned in this episode: Scott on LinkedIn at https://www.linkedin.com/in/scottmccrady/ SolCyber at https://solcyber.com…

Legacy Code Rocks

1
Developer Experience with Ramiro Berrelleza 38:13

לפני 2 years38:13

38:13

How to set up developers for success? For the longest time, companies left developers to their own devices to figure out the workflows and tools they will be using. As the teams grew, so did their problems due to the lack of established procedures and good practices. Today, we talk with Ramiro Berrelleza , the CEO and co-founder of Okteto , the leading platform for developer experience automation. Ramiro is a true visionary, continuously searching for new ways to improve the software development process and build a more inclusive tech industry. When you finish listening to the episode, connect with Ramiro on X and visit Okteto's website where you can get a free trial of their product. Mentioned in this episode: Ramiro on X at https://twitter.com/rberrelleza Okteto at https://www.okteto.com…

Legacy Code Rocks

1
Sustainable Opensource with Cory O’Donel 55:06

לפני 2 years55:06

55:06

Back in August 2023, HashiCorp announced that after nine years of Terraform being open source under the MPL license, they were switching it to a non-open source BSL license. This sent shockwaves through the software development community. Today we talk with Cory O'Daniel , a CEO and co-founder of Massdriver , a company helping improve developers' experience of cloud operations, offering self-service capabilities along with governance and guardrails to developers. Cory is also one of the drivers behind the Open TF initiative in response to Hashicorp's changing their open source licenses from MPL to BSL. He tells us why this switch matters, what to do about it, and how to keep open-source projects sustainable. When you finish listening to the episode, connect with Cory on LinkedIn , visit Massdriver's website, and check out the Open TF initiative. Mentioned in this episode Cory O’Daniel on LinkedIn at https://www.linkedin.com/in/coryodaniel/ Massdriver at https://www.massdriver.cloud Open TF at https://opentofu.org Open TF GitHub at https://github.com/opentofu…

Legacy Code Rocks

1
Software Bills of Behavior with Andrew Hendela 49:43

לפני 2 years49:43

49:43

Simply knowing what is in your software is not any guarantee of safety. We need to know what that software does versus what we expect it to do. We need to know its rules of behavior. Today, we talk with Andrew Hendela, a founder of Karambit.ai, a company dedicated to automatically detecting malware and securing your software supply chain. Andrew worked for over a decade automating hard cybersecurity problems. He has many years of experience in cybersecurity leadership and deep technical expertise in fields such as malware analysis and automated cyber attribution. He tells us about software bills of behavior and why SBOMs are insufficient to protect your software supply chain from attacks. When you finish listening to the episode, connect with Andrew on LinkedIn and visit Karambit.ai website. Mentioned in this episode: Andrew on LinkedIn at https://www.linkedin.com/in/andrew-hendela/ Karambit.ai at https://karambit.ai…

Legacy Code Rocks

1
Socio-Political Implications of Legacy Code with Amy Newell 48:48

לפני 2 years48:48

48:48

In the age of rising AI, we cannot neglect the topic of the social and political consequences of the code we leave behind. Today, we talk with Amy Newell, a 24-year veteran of the tech industry and an avid activist in issues spanning from local politics to tech. Amy discusses how to engage with emerging technologies, how to use them, and how to create them while being cognisant of the harm we can inadvertently cause along the way. When you finish listening to the episode, visit Amy's website at amynewell.com and check out their newsletter at amywriteswords.com . Mentioned in this episode Amy’s website at www.amynewell.com Amy’s newsletter at www.amywriteswords.com Amy on LinkedIn at https://www.linkedin.com/in/amynewell/…

Legacy Code Rocks

1
Automatic Refactoring with Jonathan Schneider 52:35

לפני 2 years52:35

52:35

Automating refactoring and code transformation is a fascinating and efficient way to eliminate technical debt. Today, we talk with Jonathan Schneider , a Co-Founder and CEO of Moderne, Inc. , and a former senior Software Engineer at Netflix, where he created Netflix Rewrite - a large-scale automated refactoring tool for Java codebases. Jonathan is also the author of SRE with Java Microservices . Jonathan tells us about the advantages, challenges, and pitfalls of creating automated refactoring tools and how to use them. When you finish listening to the episode, connect with Jonathan through the Moderne website and grab his book . Mentioned in this episode: Jonathan on LinkedIn at https://www.linkedin.com/in/jonkschneider/ Moderne, Inc. at https://www.moderne.io SRE with Java Microservices at https://www.oreilly.com/library/view/sre-with-java/9781492073918/…

Legacy Code Rocks

1
Disruptive Thinking with Lance James 48:43

לפני 2 years48:43

48:43

Imagine if you could counter ransomware by exploiting it to create a backup of your attacked data for you. Now, that would be disruptive! Today, we talk with Lance James. James is an experienced cybersecurity specialist with 25 years of experience in the field. Building on his programming, network security, digital forensics, malware research, and counterintelligence experience, Lance tells us how to use disruptive thinking to improve cyber security and predict and counter major cyber threats. When you finish listening to the episode, connect with Lance on LinkedIn. Lance on LinkedIn at https://www.linkedin.com/in/unit221b/ Lance’s TedTalk at https://www.ted.com/talks/lance_james_how_attackers_can_use_your_brain_against_you_in_psy_ops…

ברוכים הבאים אל Player FM!

Player FM סורק את האינטרנט עבור פודקאסטים באיכות גבוהה בשבילכם כדי שתהנו מהם כרגע. זה יישום הפודקאסט הטוב ביותר והוא עובד על אנדרואיד, iPhone ואינטרנט. הירשמו לסנכרון מנויים במכשירים שונים.