Monthly Archives: October 2021

Joining Jeffrey today is return guest, Mads Torgersen! Mads is the Lead Designer of the C# language and has been at Microsoft for 16 years. Prior to this, Mads was a professor and contributed to a language starting with J. He was previously on episode 49 of the podcast where he spoke about the latest on C# at the time.

In this episode, Mads talks about C# and the next wave of C# 10 and .NET 6. With only three weeks away to the big release, Mads shares what he is most excited for as the Lead Designer and highlights some of the major simplifications they have made with the C# 10 release.

Topics of Discussion:

[:39] About The Azure DevOps Podcast, Clear Measure; the new video podcast Architect Tips; and Jeffrey's offer to speak at virtual user groups.

[1:29] About today's episode with Mads Torgersen.

[1:46] Jeffrey welcomes Mads Torgersen back to the podcast!

[2:14] Mads' journey to becoming the Lead Designer of the C# language.

[4:13] Would Mads agree that Microsoft is taking over JavaScript with TypeScript?

[6:10] What Mads is most excited for with the C# 10 release as the Lead Designer.

[10:37] Mads highlights some of the big simplifications that have been made for C# 10.

[17:00] Are we close to just dispensing with namespace declarations and, if it's not there, inferring it from the folder structure in a project?

[19:34] A word from The Azure DevOps Podcast's sponsor: Clear Measure.

[20:05] When Mads thinks about modern C# in the .NET 6 era for regular business applications, what does he expect it to look like?

[23:59] Is Mads seeing records being the new go-to style?

[25:58] Mads discusses the several aspects to type mapping.

[28:55] The other themes (beyond simplicity) that are coming out with this next wave of C# 10 and .NET 6.

[34:28] Is there any data for the tests and code bases that have been updated?

[35:39] Mads shares some guidance around the async code.

[41:00] Mads insights on C# 10 running inside web browsers.

[42:19] Where to learn more about C#10 and .NET 6.

[43:30] Jeffrey thanks Mads Torgersen for joining the podcast!

Mentioned in this Episode:

Architect Tips — New video podcast!

Azure DevOps

Clear Measure (Sponsor)

.NET DevOps for Azure: A Developer's Guide to DevOps Architecture the Right Way, by Jeffrey Palermo — Available on Amazon!

bit.ly/dotnetdevopsebook — Click here to download the .NET DevOps for Azure ebook!

Jeffrey Palermo's YouTube

Jeffrey Palermo's Twitter — Follow to stay informed about future events!

DEVintersection Conference — Dec. 7th‒9th in Las Vegas, Nevada (Use discount code: PALERMO)

AI Conference — Oct. 27th‒29th, 2021

Mads Torgersen's LinkedIn

Mads Torgersen's Twitter @MadsTorgersen

"Mads Torgersen on the Latest in C# — Episode 49"

"Daniel Roth on Web Development with .NET 6 - Episode 158"

Docs.Microsoft.com

C# Language Design on GitHub

Want to Learn More?

Visit AzureDevOps.Show for show notes and additional episodes.

Download this episode (MP3, 44:18, 42.5 MB)

Watch this episode on YouTube

This episode on the AI DevOps Podcast site

This week, Jeffrey Palermo is joined by Dan Patrick, the Chief Infrastructure Architect for Solliance. Dan leads the DevOps and Infrastructure practice focusing on accelerating the customer's velocity to the cloud. He has been designated as a Microsoft MVP for Azure and is also a 15-year veteran of Microsoft.

In the continuing theme of Cyber Security Month, Jeffrey and Dan are speaking all about how to secure your Azure deployment. Dan highlights the important security measures that all companies should be taking in today's day and age; specific, actionable advice to managers; and online tools and resources you can leverage to keep your organization safe from cyber attacks and security breaches.

Topics of Discussion:

[:39] About The Azure DevOps Podcast, Clear Measure; the new video podcast Architect Tips; and Jeffrey's offer to speak at virtual user groups.

[1:12] About today's episode with Dan Patrick!

[1:35] Jeffrey welcomes Dan to the podcast.

[1:49] About Dan's appearances at upcoming conferences.

[3:04] Dan shares about his career journey and how he first became interested in the world of computing.

[6:09] Why is it important to think about the topic of deploying apps to Azure?

[9:24] Dan bridges the gap when it comes to corporate security from decades ago to today.

[14:31] The importance of Multi-Factor Authentication (MFA).

[19:17] Dan's two key principles or methods that companies need to use when it comes to a Cloud-native security perspective.

[21:37] A word from The Azure DevOps Podcast's sponsor: Clear Measure.

[22:10] Security categories that companies need to pay attention to.

[23:13] Why it is important to record security data.

[26:04] How to securely store security events within your organization.

[29:05] Dan's advice to managers regarding security.

[31:16] How to secure your organization with CIS Benchmarks.

[33:30] Dan's insights on what the industry is currently doing wrong regarding security.

[35:39] How to keep your organization secure from attacks by testing internally.

[38:18] Where to get started as a manager or developer to help improve the security of your team/s and organization.

[43:48] Jeffrey thanks Dan Patrick for joining the podcast!

Mentioned in this Episode:

Architect Tips — New video podcast!

Azure DevOps

Clear Measure (Sponsor)

.NET DevOps for Azure: A Developer's Guide to DevOps Architecture the Right Way, by Jeffrey Palermo — Available on Amazon!

bit.ly/dotnetdevopsebook — Click here to download the .NET DevOps for Azure ebook!

Jeffrey Palermo's YouTube

Jeffrey Palermo's Twitter — Follow to stay informed about future events!

DEVintersection Conference — Dec. 7th‒9th in Las Vegas, Nevada (Use discount code: PALERMO)

AI Conference — Oct. 27th‒29th, 2021

Dan Patrick's LinkedIn

Dan Patrick's Twitter @DeltaDan

Center for Internet Security (CIS)

CIS Benchmarks October 2021 | CIS

Want to Learn More?

Visit AzureDevOps.Show for show notes and additional episodes.

Download this episode (MP3, 45:18, 43.5 MB)

Watch this episode on YouTube

This episode on the AI DevOps Podcast site

This week, Jeffrey is joined by Bob Ward, a Principal Architect for the Microsoft Azure Data team. Bob has worked for Microsoft for 27+ years on every version of SQL Server shipped from OS/2 1.1 to SQL Server 2019, including Azure SQL. He is a well-known speaker on SQL Server and Azure SQL; often presenting talks on new releases, internals, and specialized topics. Additionally, he has a popular web series online, called "Azure SQL 4 Beginners."

In this episode, Bob speaks about SQL Edge to Cloud; from the overall vision to recent developments, and what to look forward to in the coming years. He touches on Azure Arc, SQL in the Linux space, the main components of the SQL platform, the latest and greatest for deploying changes, synchronization tools, testing frameworks, and what Azure SQL version he recommends (depending on what you're trying to accomplish as a developer).

Topics of Discussion:

[:39] About The Azure DevOps Podcast, Clear Measure; the new video podcast Architect Tips; and Jeffrey's offer to speak at virtual user groups.

[1:11] About today's episode with Bob Ward!

[2:15] Jeffrey welcomes Bob to the podcast.

[2:43] About Bob's upcoming talk at the 2021 DEVintersection Conference.

[3:26] What is the overall vision for SQL with Edge to Cloud?

[5:40] Bob's insights on the NoSQL movement.

[6:56] Bob reflects on SQL entering the Linux space and the doors it opened up.

[8:44] The main components of the SQL platform.

[10:20] Where Azure Arc fits into the picture.

[12:50] How does SQL Server get installed on devices that are not Windows operating systems?

[15:00] Are the containers all Linux? Or are some Windows?

[17:55] Bob shares about the replication technology that keeps things "in sync" with SQL Server and how syncing technology has evolved over the years.

[20:35] A word from The Azure DevOps Podcast's sponsor: Clear Measure.

[21:06] Does Raspberry Pi support this new synchronization with Azure SQL?

[22:31] Is it part of the SQL Edge vision to be able to replicate a single, small table?

[23:36] About Bob's upcoming keynote at the 2021 DEVintersection Conference, "Microsoft SQL Server and Azure SQL Futures."

[25:11] What is the latest and greatest method for deploying changes?

[27:28] is there a particular test framework that the SQL team uses?

[29:34] All about one of Bob's favorite tools: Ostress and some of the other internal benchmark testing that they use.

[32:57] What version of Azure SQL would Bob recommend to developers that are looking to create a brand-new 100% in-the-Cloud application?

[33:40] The difference between Azure SQL Database and Azure SQL Managed Instance.

[37:00] Bob highlights an important resource that developers should take a look at if they're interested in learning more about Azure SQL completely for free.

[38:20] Jeffrey thanks Bob Ward for joining the podcast!

Mentioned in this Episode:

Architect Tips — New video podcast!

Azure DevOps

Clear Measure (Sponsor)

.NET DevOps for Azure: A Developer's Guide to DevOps Architecture the Right Way, by Jeffrey Palermo — Available on Amazon!

bit.ly/dotnetdevopsebook — Click here to download the .NET DevOps for Azure ebook!

Jeffrey Palermo's YouTube

Jeffrey Palermo's Twitter — Follow to stay informed about future events!

DEVintersection Conference — Dec. 7th‒9th in Las Vegas, Nevada

Bob Ward's LinkedIn

Azure SQL 4 Beginners

TPC Benchmarks

Ostress

Blazor WebAssembly

Azure Arc

Linux

Kubernetes

Raspberry Pi

Azure SQL Database

Azure SQL Managed Instance

Azure SQL Fundamentals

Want to Learn More?

Visit AzureDevOps.Show for show notes and additional episodes.

Download this episode (MP3, 39:44, 38.1 MB)

Watch this episode on YouTube

This episode on the AI DevOps Podcast site

This week, Jeffrey is joined by Troy Vinson; a Principal Software Architect at Clear Measure as a CISSP (Certified Information System Security Professional.) He is an experienced leader, architect, and problem-solver in Information Systems Security and Software Development technologies and has spent the majority of his career integrating computer science, information science, and cognitive science to assist in software development and the management of information.

With October being CyberSecurity Awareness Month, Troy gives a rundown on everything that developers and development teams need to know regarding security, how to become more cyber security aware, the top ten web application security risks you need to look out for, how to keep your environment secure regardless or where you're working from, and what you can putting in place today to improve your cyber security.

Topics of Discussion:

[:39] About The Azure DevOps Podcast, Clear Measure; the new video podcast Architect Tips; and Jeffrey's offer to speak at virtual user groups.

[1:11] About today's episode with Troy Vinson!

[1:23] Jeffrey welcomes Troy to the podcast.

[1:30] What is CISSP?

[2:53] Troy shares his career highlights and the path that led him to his current role in cyber security.

[4:39] Why is October Cybersecurity Awareness Month?

[6:18] What developers should be aware of when setting up a connected environment for themselves at home.

[8:47] Troy's favorite VPN services.

[10:08] Best practice: Always work from a VPN, especially as a developer working from a public place.

[10:25] What developers should keep in mind about source code when it comes to cyber security.

[12:32] How to keep documents (that don't quite fit in a source control repository) secure.

[14:31] Troy highlights important security architecture models of practice.

[15:56] How is the STRIDE model applicable?

[17:59] A word from The Azure DevOps Podcast's sponsor: Clear Measure.

[18:30] What is repudiation in the STRIDE model referring to? What is it in code changes? When is it necessary?

[20:22] Are there test suites that developers can use to augment their functional tests that check for security measures?

[23:16] Should development teams hire third parties to do audits versus doing it in-house?

[24:36] What OWASP Top Ten is and why all of your engineers should be trained on it.

[26:15] Is there a comprehensive list of web application security risks?

[27:28] Troy highlights the importance of #6 on the OWASP Top Ten list: vulnerable and outdated components.

[29:15] Rules of thumb regarding security for development teams when it comes to deployment and configuring environments

[30:56] Free online courses for cyber security awareness that you can share with family members and friends.

[33:52] Jeffrey thanks Troy Vinson for joining the podcast!

Mentioned in this Episode:

Architect Tips — New video podcast!

Azure DevOps

Clear Measure (Sponsor)

.NET DevOps for Azure: A Developer's Guide to DevOps Architecture the Right Way, by Jeffrey Palermo — Available on Amazon!

bit.ly/dotnetdevopsebook — Click here to download the .NET DevOps for Azure ebook!

Jeffrey Palermo's YouTube

Jeffrey Palermo's Twitter — Follow to stay informed about future events!

DEVintersection Conference — Dec. 7th‒9th in Las Vegas, Nevada

Cybersecurity Awareness Month | CISA

Cybersecurity Awareness Month | National Cybersecurity Alliance (NCSA)

NordVPN

ExpressVPN

STRIDE Model

GitHub

DevSecOps

SharePoint

One Drive

Azure Front Door

Azure Application Gateway

FxCop

Roslyn

Sonarqube

OWASP Top Ten

Top 25 Most Dangerous Software Errors CWE/SANS

2021 CWE Top 25 Most Dangerous Software Weaknesses

Want to Learn More?

Visit AzureDevOps.Show for show notes and additional episodes.

Download this episode (MP3, 34:47, 33.4 MB)

Watch this episode on YouTube

This episode on the AI DevOps Podcast site