In this issue, July 5, 2022 View it in your browser.

SageMaker JumpStart, Dropbox Resilience, AppSec, Composable Ecosystems, PACMAN, Project Leyden, Trivago Adopts Next.js, GraphQL and Ballerina, Smashing Silos, Scalable SRE

QCon San Francisco (Oct 24-28): Helping thousands of senior software developers & architects adopt the right patterns & practices for over 16 years.

Learn the emerging trends our Program Committee believe have the most impact in software development. Explore the use cases shared by real-world practitioners to help you solve your biggest challenges. Implement the best practices to shape your projects beyond the conference. Register before July 25th and save $450 off the full-price ticket!
 

SPONSOR AD

LaunchDarkly

10 Critical KPIs for Stronger Software Releases


In this guide, we suggest 10 KPIs you can use to track how well you’re deploying, releasing, and shipping software. Although these are just our suggestions, we believe they represent a good starting point for data collection during an often overlooked phase of software development. Download now.

https://res.infoq.com/podcasts/matt-klein-envoy-gateway/en/smallimage/InfoQ-Podcast-logo-200-1656337112436.jpeg

Matt Klein on Envoy Gateway

Today on the podcast, Wes Reisz speaks with Matt Klein about a recent announcement that Envoy Proxy will partner with many well-known companies in the space, including VMware, Ambassador Labs, and Tetrate to build and maintain a new member of the Envoy family – Envoy Gateway. (Podcast)

https://res.infoq.com/podcasts/software-learning-systems/en/smallimage/engineering-culture-podcast-logo-1656747514104.jpeg

Jessica Kerr on Software Teams and Software Products as Learning Systems

In this podcast, Shane Hastie spoke to Jessica Kerr about how software teams and software products are symmathesys – learning systems that are made up of learning parts. (Podcast)

TOP AI, ML & Data Engineering NEWS HEADLINES

  1. Stanford University Open-Sources Controllable Generative Language AI Diffusion-LM

  2. Amazon Released Incremental Training Feature in SageMaker JumpStart

AWS and Microsoft Working Together on PyWhy, the New Home of Causal ML Library DoWhy

AWS in a joint effort with Microsoft have established PyWhy as a fresh GitHub organization to integrate AWS algorithms into DoWhy, a casual ML library from Microsoft, which has moved to PyWhy. (News)

SPONSOR AD

DataStax

Cassandra: The Definitive Guide (By O'Reilly)

In this third edition - updated for Cassandra 4.0 and K8ssandra - you'll learn about Cassandra's distributed and decentralized structure, create a working data model and compare it with a relational model, develop sample applications using client drivers for languages including Java, Python, and Node.js, and more. Download now.

TOP DevOps NEWS HEADLINES

  1. Dropbox Unplugs Data Center to Test Resilience

Analyzing Incident Data across Organizations: Courtney Nash on the VOID

The Verica Open Incident Database (VOID) is assembling publically available software-related incident reports. InfoQ talks with Courtney Nash on their recent findings including how MTT* metrics may not be beneficial, the average time to incident resolution, and the importance of studying near-miss reports. (Article)

Making Sense of Application Security

Adib Saikali provides a roadmap for application developers and architects to master application security, identifying the security skills needed as an application developer. (Presentation with transcript included)
Software Delivery Practices Evolve Fast, So Should Your Learning: Attend QCon San Francisco Software Development (Oct 24-28).
What are the major trends that matter right now in software development and technical leadership? Uncover emerging software trends and practices to solve your complex engineering challenges, without the product pitches. Save your spot now!

Prod Lessons - Deployment Validation and Graceful Degradation

Anika Mukherji discusses lessons learned in production at Pinterest: deployment validation framework and product-informed graceful degradation, preventing hundreds of outages. (Presentation with transcript included)

SPONSOR AD

CockroachLabs

AWS, GCP & Azure: Which public clouds make the grade?

Download your copy of the 2022 Cloud Report for unbiased insight into how AWS, GCP, and Azure stack up across a range of instance types and benchmarks that app builders care about most.

TOP Cloud NEWS HEADLINES

  1. TLS 1.2 Becoming the Minimum TLS Protocol Level on AWS

The Compounding (Business) Value of Composable Ecosystems

Being “free” and open source doesn’t hinder the value of these projects to businesses and end users; rather it unlocks it. The composability of open source ecosystems allows the innovation and value of the whole ecosystem to compound on itself. (Article)

SPONSOR AD

Microsoft

Watch JDConf 2022 On-Demand

Learn about development best practices, cloud computing, and the latest Java trends. At JDConf 2022, we’re featuring sessions from a range of community and Microsoft speakers highlighting Java expertise by showcasing the great work going on across the Java landscape. Watch On-Demand.

TOP Development NEWS HEADLINES

  1. Git 2.37 Brings Built-in File Monitor, Improved Pruning, and More

New PACMAN Vulnerability Affecting Apple Silicon CPUs

Uncovered by a team at MIT CSAIL, PACMAN is a new vulnerability affecting a defense mechanism available in Apple Silicon processors and known as pointer authentication code (PAC). While Apple downplayed the severity of this finding, the researchers hint at the fact that PACMAN brings an entire new class of attacks. (News)

SPONSOR AD

ScyllaDB

SQL to NoSQL: Architecture Differences and Considerations for Migration

Read this paper to understand SQL to NoSQL architectural differences, the tradeoffs between flexibility, scale, and cost, and considerations for successful SQL to NoSQL migrations. Download now.

TOP Java NEWS HEADLINES

  1. Project Leyden Delays OpenJDK AOT Compiler, Optimizes JIT Compiler Instead

Java News Roundup: Classfile API Draft, Spring Boot, GlassFish, Project Reactor, Micronaut

This week's Java roundup for June 20th, 2022, features news from OpenJDK, JDK 19, JDK 20, Spring point releases, GlassFish 7.0.0-M6, GraalVM Native Build Tools 0.9.12, Micronaut 3.5.2, Quarkus 2.10.0, Project Reactor 2022.0.0-M3, Apache Camel Quarkus 2.10.0, and Apache Tika versions 2.4.1 and 1.28.4. (News)

TOP Architecture & Design NEWS HEADLINES

  1. Trivago’s Journey from PHP+Melody to Next.js and Typescript

  2. Uber Introduces a Universal Signup and Login Stack

Using GraphQL and Ballerina with Multiple Data Sources

The Ballerina programming language is well-suited to developing GraphQL applications, due to the network abstractions, network-aware type system, clear data representations, and visual diagrams. This article discusses the benefits of GraphQL and Ballerina, and walks through a sample application that retrieves data from a database and a 3rd-party API. (Article)

SPONSOR AD

Curity

The Evolution of Signature Algorithms

Algorithms are essential to avoid security incidents such as private keys being retrieved from signatures or valid signatures being created. Read article.

TOP Culture & Methods NEWS HEADLINES

  1. Applying Observability to Increase Delivery Speed and Flow in Teams

Smashing Silos: Scaling up an Energy Tech Disrupter Remotely

Being a small EnTech disruptor in a rapidly evolving market can feel a bit daunting; add in an acquisition, a rebrand and twice the team members that you had a year ago and you have a recipe for growing pains. Here is how we leaned on our strengths and pulled experience from all directions to allow for team member fulfilment during a breakneck growth spurt. (Article)

Establishing a Scalable SRE Infrastructure Using Standardization and Short Feedback Loops

This article explores an SRE implementation where the operations team builds and runs the SRE infrastructure and the development teams build and run the services leveraging the SRE infrastructure. This SRE solution enables the software delivery organization to scale the number of services in operation without linearly scaling the number of people required to operate the services. (Article)

Talk Like a Suit: Making a Business Case for Engineering Work

David Van Couvering walks through some of the approaches and strategies used to make a business case, and walks through a few examples to help make it concrete. (Presentation with transcript included)

InfoQ Call for Contributors

Write for InfoQ: Share knowledge, connect with the global software development community, and grow your career

Are you an experienced senior software engineer or technical leader that is passionate about innovation, adoption of technologies, and the learning and sharing of knowledge with your peers?

InfoQ content is written exclusively by software practitioners like yourself, with the goal of sharing inspiring content from real-world use cases, best practices used by innovator and early adopter companies, and news on emerging trends.

Join the InfoQ Writing Team

 

SPONSORED CONTENT

Latest White Papers

Infographic: 7 Steps to Kubernetes Adoption, from our friends at D2iQ

[InfoQ eMag] Service Mesh Ultimate Guide 2021