When I started programming, no one would ever put secrets in their code, such as passwords, credentials, keys, and access tokens. It was just asking for trouble. But then along came code-driven automation with secrets. Suddenly we often checked…Read More

Yes, AI can help with programming, but ChatGPT is not ready to be your programming buddy, especially regarding securing your code. Wouldn’t it be great to have an AI pair programming friend to help you secure your code? I’d love … Continue reading →

For longer than some of you have been alive, I’ve been preaching the gospel of using more secure desktop operating systems. You see, Windows has been insecure since 1985’s Windows 1.0, really an MS-DOS extension, rolled out the door. Then, … Continue reading →

Fred Brooks died last month at age 91. Thanks to his best-selling software development management book, The Mythical Man-Month Essays on Software Engineering, he became a programming and management legend. Over the decades, I’ve met many tech…Read More

A new class of software supply chain vulnerability in GitHub Actions and Rust leverages artifact poisoning to attack the underlying software development pipelines. People are way too inclined to believe that just because some program, language,…Read More

At the Open Source in Finance Forum (OSFF) in New York City, the Fintech Open Source Foundation (FINOS) Dec. 8 announced the results of its 2022 State of Open Source in Financial Services Survey. The results were — to no … Continue reading →