Monitoring is Testing

So a while back I was approached by DZone for some feedback on software quality. After ranting for an hour I was asked if I would mind writing an article on the topic. So I did and it got published earlier this week.

Secure(r) IIS settings

If you are using IIS as a webserver you are probably interested making sure the service is configured to be as secure as possible.

Do I need a new version of my REST API when I add something?

So today I will not talk about how to version REST APIs but rather how you can deal with certain changes. Specifically I want to talk about adding properties to an entity and then adding supported values to a list of predefined values for a property.

Understanding HTTP Strict Transport Security (HSTS)

I'm not going to explain it all myself since it was explained in an excellent way here. However below is the executive summary.

Black Hat USA 2015 report

Last week I told you about my training experience at Black Hat 2015. Now it is time to talk to you about the briefings and the business hall.

Black Hat USA 2015

I'm attending Black Hat 2015 USA. This is my first time at Black Hat or any other security related conference and here are my first impressions.

My favorite book for agile teams

Whenever I have worked with teams or Scrum Masters there has always been one book that I have recommended them to read. And now I'm happy to see that it has been updated.

How to not run an organization - the CIA version

I stumbled over this document dating back to World War 2 where the predecessor to CIA, the Office for Strategic Services issued a field manual on how to sabotage. Especially interesting are the sections on general interference with organizations and production.

Are you burning up or down?

You have probably heard the term burn-down and burn-up when referring to two different ways of tracking progress against some target in agile projects. but have you heard about the enhanced burn-down?

The Microservice is not what it seems to be

The microservice hype where every application that uses a service should be implemented as a series of microservices is a little unhealthy. Like most technologies; if you don't know what you are getting yourself into there will be problems...