no dogma podcast

Summary Todd Gardner joins me to discuss web certificates, their expiry and CertKit. Details Who he is, what he does. What a certificate is, updating one, out of date certs, outages. No certificate. Move to full https. Certificate transparency logs, public; wildcard certificates. RSA key compromised - can decrypt old traffic; perfect forward secrecy - may be able to decrypt a single session. Certificate authority, how they work with browsers; the price of certificates; free certificates from Let's Encrypt. Certificate lifetime reduction. Bygone SSL problem, domain ownership vs certificate ownership, man in the middle. Browsers forced certificate lifetime change; automation required. Who is impacted. Support this podcast Full show [email protected] Certificate Transparency LogsThe 47-Day Certificate Ultimatum: How Browsers Broke the CA Cartel

SummaryMads Torgersen, the lead designer of C#, joins me to discuss what's new in C# 14.DetailsWho he is, what he does. His PhD. High and low level work. The language and the compiler. How the compiler enforces the language. Extension members - methods, properties, static, operators. Field backed properties. Going for a preview feature to full release; one feature that didn't make it. Null conditional assignment. Partial constructors; cognitive load of the language; optimized for heavy use and the professional developer; simple code vs simple language; the baggage of a C#. User defined compound assignment. Type unions - this year there is a design. dotnet run app.cs, language changes. Reducing boilerplate over the years.Support this podcastFull show notesWhat's new in C# 14C# Language Design MeetingsOther episodes with Mads

SummaryTed Neward tells me about his job search that started in 2022. Part 2 of a 2 parter.DetailsCover letters. The interviews, "elite code" - nothing to do with real programming jobs. Selling elite tests and tutorials, memorizing code. Showing that you can code, live coding. Ageism; cost of developers. Emotional aspects of the job search; much is out of your control; it can be devastating; accept help. Leverage the network, keep busy, keep the faith. How to find Ted.Support this podcastFull show [email protected]'s home pageTed's blog postTed's LinkedIn

SummaryTed Neward tells me about his job search that started in 2022. Part 1 of a 2 parter.DetailsWho he is, what he did. The job search begins. Companies are looking for "passionate" employees with specific skill sets. The job market in 2022. The COVID tech bubble. How he searched; false starts, near misses. Writing a book on the side. You need luck too. Customized resumes for roles. Applicant tracking systems.Support this podcastFull show [email protected]'s blog post

SummaryJeff Fritz and I talk about glories of running .NET on Linux.DetailsWho he is, what he does. Where .NET runs. When it moved from Windows only. Arrival of .Net Core, open source. What changed in Microsoft for a move to multi-platform. .Net standard. Why try .NET on Linux. Flavors of Linux. .NET on Linux in Docker on the cloud. Types of Linux where .NET runs. CPUs. Ways to install .NET. Multiple versions of .NET can be installed. Ahead of time compilation. All the other tools you need, IDEs, Docker, databases including SQL Server. Publishing .NET as a container. .NET Aspire. Database IDEs. Maui. How to get started with .NET and Linux, Codespaces, live disks, WSL.Support this podcastFull show [email protected]'s home pageBryan's blog post on .NET on LinuxBuilding a container image with a Dockerfile

SummaryTanya Janca talks about her new book and how to write secure code.DetailsTanya's new book, why she is writing for the developer. Including code for multiple languages. What makes her book different. Starting with how to defend against vulnerabilities. Validation and sanitization. What zero trust is. Balancing too much security vs other needs. Supply chain attacks and accidents. Backing up and losing code. Excess security and workarounds. Sharing information about security breaches, making it ok to fail. Re-running security tests when code changes, using analysis tools. Testing legacy applications with compromised libraries, network segmentation, web application firewall. Where to get the book.Support this podcastFull show notesTanya's home pageTanya's booksOther security podcasts

SummaryMads Torgersen talks about what's new in C# 13, and some of what might be coming in C# 14.DetailsUpcoming release of C# 13, .NET Conf 2024. Params collections, use cases. Overload resolution priority. System.Threading.Lock, why a new lock type. Ref struct types, the underbelly of C#. Update on discriminated unions, but years away. Preview features - field keyword properties, extension everything.Support this podcastFull show notesWhat's new in C# 13C# Language Design - GitHub

SummaryAndy Gocke, lead of the native AOT and app model team at Microsoft answers listener's questions about native AOT.DetailsFuture of Native AOT. Trimming support in third party libraries. Why .NET prefers its own JIT compiler over the LLVM MSIL backend. How much bigger with AOT be over MSIL and JIT. Where to follow libraries supporting AOT. Using AOT and GPUs. WASM performance. Can Native AOT replace Mono AOT. Plan for using dependency injection with AOT. When will the IDEs support for Native AOT. How to get in touch.Support this podcastFull show notes@andygockeNative AOT deploymentNative AOT on GitHubOther C# Podcast Episodes

SummaryStormy Peters talks about open source software and how to support the communities that create it.DetailsWho she is, what she does. What open source software is, what free means. Different types of OSS licenses, beerware, restrictive licenses. Commercial use of open software. Making OSS financially viable; tools that GitHub offers, most software is built on open source software. "We're not paying for free software!", normalizing paying for OSS; hard for companies to make payments; GitHub sponsors for companies. Individuals sponsoring/supporting OSS, getting in touch with maintainers. Barriers to getting involved. One-person projects. Sponsorship by programming language. Is anyone making enough money from sponsorship. How GitHub supports OSS developers; corporate sponsors. Copilot and its use of OSS. Future of OSS. How to get involved in OSS.Support this podcastFull show notes@stormingStormy's Wiki pageStormy's web siteGitHub corporate sponsorship

SummaryAndy Gocke, lead of the native AOT and app model team at Microsoft talks about ahead-of-time compilation (AOT) in .NET.DetailsWho he is, what he does. Quick overview of ahead-of-time compilation (AOT); finding your code. Traditional compilation, interpreter vs compiler, translation from source to target languages. Operating systems, intermediate language (IL). There's always an interpreter. Just-in-time compilation (JIT); Java ran on multiple OSes, but .NET was Windows only; .NET ran on multiple architectures. Ready-to-run (R2R) and trimming. Tiered compilation, variable performance. R2R mixes precompiled and IL, native AOT only has precompiled. Trimming - getting rid of unneeded things, trouble with plugins and reflection; static analysis - don't ignore warnings. Why AOT was built, where it is a good fit. How much work it was; Core RT, low adoption, but good feedback. Good and bad use cases for AOT. For .NET 7 console apps and libraries, or if you don't get trim warnings; a single trim warning is too many. AOT and non-AOT OSS NuGet packages. .NET 8 support for ASP.NET. JIT and IL will not go away. AWS Lambda functions and AOT, exclusions, problems that might occur; trimmable all the way down. Getting started with AOT. Can't turn off trimming. Future of AOT.Support this podcastFull show notes@andygockeNative AOT deploymentAndy's de/serializer Serde-dnMore C# episodes