Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror
×

Comment Re:And thats why (Score 2) 92

Ops should be limited to maintaining infrastructure services like VMs and creating tools to allows devs to deploy to prod on their own in a controlled way.

That's a valid approach for sure. What I've found in that case, however, is that taking Ops out of the loop and relying completely on developers for operational response to an incident in production yields poor results. Put simply, it's not their core competency, and most don't take to it well (although some do!). It's a very different type of pressure to which they're unaccustomed.

In my experience, a hybrid approach is best, where Ops personnel quarterback a production incident (or Support, assuming it's a mature org), and escalate as needed to development.

YMMV

Comment Re:More Crap!! (Score 2, Informative) 92

You sound like you're referring to corporate IT throughout your comment, or at least that's my impression. DevOps concepts don't really apply there...or at best it's a square peg in a round hole situation.

Building custom software, and more specifically SaaS, truly do have a lot to gain by adopting DevOps, especially when combined with Agile development.

Comment Grande is Great (Score 3, Informative) 99

I had Grande service for years, and they were by far the best internet provider I've ever had. Low and consistent price, and rarely any connectivity or speed issues.

I recently moved to an area they don't service and am stuck with Spectrum...which has been a horrible experience all around. This article makes me miss them even more.

Comment Re:Why? (Score 3, Insightful) 104

The point is not having secure passwords, the point is having different passwords for your services.

Agreed.

Your password security is only as secure as where you are using them.

I disagree. If I use Keepass and store my DB locally, then I'd argue that's more secure than anything stored in the cloud. At the very least, it's up to me to ensure it's secure, rather than hoping someone else is doing so for me.

With cloud stored passwords, you can have auto generated arbitrary passwords, each different for each service so in case of a leak, your other services aren't compromised.

This doesn't require cloud storage of passwords.

Just make sure the password vault is encrypted client side and it should be reasonable secure for "random online stuff".

Or, store it COMPLETELY client side...and encrypt it.

For banking or high secure requirements, then no. Something involving keys would probably be better.

So you propose using a cloud storage service for passwords, unless you're banking?

Comment Re:It was a tiny company. What else is really used (Score 1) 76

What other practices have you seen used a lot, practical processes which really provide clear value?

Measure key metrics like cycle time, quality (bugs), code coverage, test stability, and escapes. Review weekly as a team, however small that may be. You generally don't optimize or improve what isn't measured and regularly reviewed. Release small changes often rather than big changes less frequently, and automate as much of the release process as possible.

Comment Re:Times are changing. New tools provide new abili (Score 1) 76

I have hope that better and better tools and processes will be developed, and I'd like to help develop them. So far I've started by applying practices such as code review in organizations that didn't previously do it. We've found that code review / peer review reduces bugs enough to make it worthwhile.

This stands out in this day and age. I'm glad you've successfully introduced peer review, but I haven't heard of a shop in the last decade that doesn't implement peer review. Sounds like a change at the top is needed if you're at a shop that far behind.

Slashdot Top Deals

"And remember: Evil will always prevail, because Good is dumb." -- Spaceballs

Working...