no dogma podcast

Summary Niall Merrigan, security researcher tells me about bug hunting and the best hacks he has seen. Full Details Who he is, what he does. Bug hunting, crowd sourcing the hunters, bug bounties, should you invite attacks on production, Hacker One and Bug Crowd. IoT is the most attacked software; smart cars, aircraft. Security.txt. Responsible disclosure, what do if you find a bug, Niall's experience when reporting a particular bug. Even when bugs are known and acknowledged they are not necessarily fixed; industry code systems, hacks designed to kill. Is every hack is a "sophisticated hack", the @mat hack. Are you a target for hacks. The most impressive hack Niall has seen. Physical access to device, hak5 rubber duckie. Supply chain injection*. Hacking a cat. * We recorded this episode before the Super Micro story broke. Full show notes

Summary Joe McBride creator GrpahQL .NET tells me about his implementation of the GraphQL standard. Details Who he is, what he does. What GraphQL is, protocol agnostic, type safe. Why use GraphQL; queries, fields. Why use GraphQL, how it is being used, some missing features. OData as a substitute for GraphQL. Why Joe built GraphQL.Net, the bus rule. How compliant GraphQL.Net is with the standard. The GraphQL UI. A practical example reducing the number of columns requested by the ORM. Unit testing. GraphQL as backend for your frontend. Upcoming React conference in Nevada. Full show notes

Summary Jon Smith talks to me about Entity Framework Core 2.1, how to organize your EF code to meet the principles of domain driven design and his recent book on the topic. Details Who he is, what he does. Leaving tech and coming back. Differences between EF 6 and EF Core, no more db initializer or data validation (by default), better adding and updating, lazy loading, less bugs in Core 2. How to layout your models, DTO's, business logic, getters and setters, action methods and where to perform queries. Measuring performance and scalability of Entity Framework; Bryan rants about measuring performance yourself, Dapper vs EF, does performance always matter ; Entity Framework Extensions and Dapper Plus from ZZZ Projects. Unit testing, Ensure Created, how to test calls to stored procs with EF. Full show notes

Summary Laura Elizabeth explains how engineers can improve their design skills. Details Who she is, what she does. Why developers should care about design. Bryan's PowerPoint slides are better than they used to be. Where to start learning design, iterate your design. How do you know if the design is good, getting others to look at the site, making use of negative feedback. look at other sites for inspiration. Accessibility is important. Common problems in design. Knowing when the design is complete. Full show notes

Summary Jay Gambetta of IBM talks about their new Quantum Information Science Kit which makes it easy to running chemistry, artificial intelligence and optimization applications on quantum computers. Details Who he is, what he does, quick overview of IBM Quantum Experience. Qiskit, Terra and Aqua, compilers, providers, simulators, experiment with chemistry, AI and optimization. Integration with existing software libraries. Reasons why quantum is better for some types of problems. Why use QISKIT instead of running on quantum hardware. IMB is Q Network. Start of the commercial quantum computing, who is involved, hard to define commercial. Can small companies get involved. IBM's research in the quantum world. Coherence and reducing error rates to allow algorithms to run longer. Where we might be in a few years, error. How to get started with quantum. Full show notes

Summary Spencer Schneidenbach talks about REST APIs, what makes a good one, who should design it, how to document it and why developer experience is so important. Details Who he is, what he does. Designing an api, the consumer should drive the design, is the developer the main consumer, is the business a customer? What REST is, RPC, nouns not verbs, querying, SEARCH verb, PUT and PATCH, common conventions. Changing how an API works, versioning, version management. Importance of documentation, error code docs, who writes the docs. Consistency, good api design is user experience for developers, Spencer loves Twillo. Full show notes

Summary Andrew Lock, blogger and author of ASP.NET Core in Action talks to me about the .NET Core and why you should probably use it instead of Framework. Details Who he is, what he does. His book. Why did Microsoft build .NET Core, the complications of Web API Core running on Framework. Platforms it works on. New configuration system, typed configs. Dependency injection is built-in now, a mention of HttpClientFactory. Middleware, pipelines to perform tasks. Authentication and authorization, policy server. Kestrel server. Full show notes

Summary Jeff Glennon used to be an agile consultant helping companies align their departments to deliver better software, but he left that world behind and is now the Chief Operations Officer at Night Shift Distributing, a distributor of craft beers and other beverages in Massachusetts. Jeff talks to me about his move, the skills he brought with him and what he has learned. Details What he used to do, moving to Nightshift Brewing, bringing his skills from the software world. Setting goals, doing it as a team, "commitments", scaling, going beyond the local customers, opening another location. Being the chief operating officer and leading sales at same time. Differences and similarities between agile consulting and role as COO. An agile approach to beer distribution, partnering with their customers, when to drop a partner. Scaling problems, logistical challenges, capital investments, big decisions affect many families, how they make big decisions, strategy is a day to day and week to week thing. Three to five year plan. It's not lines of code it's beer, the similarities between the software and beer worlds. What he has learned in two years, "the value of stopping for a second", saying no and letting people challenge you is important. Jeff doesn't plan to go back to tech. "It's just beer"

Summary Jimmy Bogard creator of AutoMapper, MediatR and HtmlTags talks to me about his move into the world of containers. Details Who he is, what he does, his open source projects. What containers are, why use them, containers are like Lego bricks. How many apps to a container. Windows containers types. Differences between Windows and Linux containers, why choose over the other, size and ease of scaling; if you choose Linux you need to know something about Linux admin. Do apps need to written in a different way to work on containers. Be mindful of the size of Windows containers. Is an app in a container a microservice. Jimmy Bogard's liver. Jimmy likes Microsoft docs on containers.

Summary Michael Brett of QxBranch tells me about their work in the world of commercial quantum computing, their software and where he sees the industry going. Details Who he is, what he does, history of QxBranch, predictive analytics - financial, pharmaceutical, gas industries. Quick overview of quantum and the limits of traditional computing. Why Australia has so much quantum computing experience. State of the art. Cloud based quantum computing. Examples of use, financial world. Building software, early stage hardware and simulators; every hardware.