Reading Notes #652

This week, we explore a variety of topics, from database containerization and AI security risks to the evolving landscape of gaming devices and cloud technologies. We also explore the shift towards security-first development and the integration of .NET Aspire with SQL Server for integration testing.

Let's dive in!

Suggestion of the week

• GitHub MCP Exploited: Accessing private repositories via MCP (Marco Milanta, Luca Beurer-Kellner) - AI tools are very powerful but also pretty new in our lives. It's important to stay up to date and understand the risks. Not scared, but to see the potential flaws and how to avoid them.

Cloud

• Azure Container Apps vs AKS: Which Is Right for Your Enterprise Application? (Chris Pietschmann) - This post answers a common question about those two services.

Programming

• Beyond DevSecOps: The Rise of Security-First Development (Industry Perspectives) - DevSecOps was a wake-up call, and we need to build our app security first. That seems to make sense, right? Have a read of this post to dig deeper into this idea and understand its foundation

• .NET Aspire dev-time orchestration for SQL Server integration tests (Ian Griffiths) - First post of a series about the spire and database, this one just set the initial setup. Stay tuned for more

Databases

• Running a MySQL database in a Docker Container (Mercy Bassey) - Running databases in a container is a real game changer for developers.

Miscellaneous

• SteamOS puts the pressure on Microsoft’s Xbox-branded handheld (Tom Warren) - Gaming devices are in a completely different world, and, normally, all OS need to adapt. A fascinating post about steamOS and the future of Windows in that scope

~frank

Reading Notes #522

Yep! It's Monday again :) 

 Already time to share new reading notes. Here is a list of all the articles, and blog posts that catch my interest during the week. 

If you think you may have interesting content, share it!

Cloud

• Introduction to DevSecOps on Azure (Daniel Krzyczkowski) - DevSecOps is a real thing and it's accessible for all. This post explains what it is and provides examples of how it could be implemented at a high level.

• Using Azure CLI Authentication within Local Containers (James Dawson) - This post provides two very useful workarounds with WSL and docker to a difficulty we might encounter while using a different platform.

Programming

• #RaspberryPi – Install raspi-config on Ubuntu 22.04.1 LTS (Bruno Capuano) - A short post that shows how to get Unbuntu 22.02 on your Pi.

• Adding color to bracket pairs (Mads Kristensen) - A call for feedback on an up common feature of Visual Studio. Rainbow Brackets yes it will colorize the brackets but what should be the options?

• Browser Extension with Blazor WASM - Cross-Browser Compatibility (Justin Yoo) - Nice post in a series that really shows in the details and explains how to use the extension.

• DevOps monitoring: The Why, What, and How of DevOps monitoring (Hiren Dhaduk) - This is an excellent post to get us to think about our first step. It explains the reason why we should care and briefly lists a few tools available today on the market to help.

• Get started with NDepend: Uncle Bob and the Zone of Pain (Dennis) - A nice article that explains how to get started with NDepends.

• Rewrite your git history in 4 friendly commands (Salma Alam-Naylor) - The git trick of the week for when you want to do a major cleaning.

• Working with System.Random and threads safely in .NET Core and .NET Framework (Andrew Lock) - Interesting post about Random numbers in .NET.

Podcasts

• 38. Open source framework MVVM Light, Azure Static Web Apps & timekeeper.cloud with Laurent Bugnion (Betatalks the podcast) - Cool episode about, well my friend! :)
• How to be a great (new!) leader (Modern Mentor) - Really interesting episode for new leaders/ influencers.

~frank