Skip to main content

Posts

Showing posts with the label development_process
Last week, we saw plenty of posts about integrating DeepSeek into applications, running it locally, and similar topics. What surprised me, though, is that while I expected issues to surface, I didn't anticipate such a massive security problem with DeepSeek AI chats. Big thanks to Gal Nagli for this research: https://www.wiz.io/blog/wiz-research-uncovers-exposed-deepseek-database-leak . We've seen countless discussions on how companies achieved this cheaply—but also so insecurely. This reflects the current state of the industry, where everyone is racing to outdo competitors in budget, speed, and features while completely neglecting security and stability. Take Garmin as another example: https://www.dcrainmaker.com/2025/01/garmin-watches-are-crashing-when-trying-to-start-gps.html . Or this persistent Windows Update issue: https://www.youtube.com/watch?v=h8ppow5te20 And perhaps the biggest failure yet—the CrowdStrike incident: https://en.wikipedia.org/wiki/2024_CrowdStrike-related...

Taming the Shadow: Turning Tech Debt into a Strategic Advantage

Tech debt is one of those topics that can make or break a project.  It's like this ever-present shadow lurking around our cool, innovative ideas. It's necessary sometimes, but when it grows too much, it can weigh everything down like an anchor. 🚀 Here's my spin on how to manage tech debt effectively: - 𝗨𝗻𝗱𝗲𝗿𝘀𝘁𝗮𝗻𝗱𝗶𝗻𝗴 𝗧𝗲𝗰𝗵 𝗗𝗲𝗯𝘁: See it as a necessary compromise to get things moving but don’t let it turn into a never-ending burden. - 𝗙𝗼𝗰𝘂𝘀 𝗼𝗻 𝗪𝗵𝗮𝘁 𝗖𝗼𝘂𝗻𝘁𝘀: Align tech debt management with the business's core priorities. Score quick wins but keep an eye on securing long-term success. - 𝗖𝗼𝗺𝗺𝘂𝗻𝗶𝗰𝗮𝘁𝗶𝗼𝗻: Keep the lines open between dev teams and business folks. Everyone should be transparent about tech debt implications and the choices being made. - 𝗔𝗹𝘄𝗮𝘆𝘀 𝗚𝗿𝗼𝘄𝗶𝗻𝗴: Keep things fresh with frequent updates and changes. Be open to the latest tech trends and business shifts. Investing in education is something I hold in...

Why I Started Using .http Files

I recently discovered how convenient it is to use .http files for API testing directly within an Integrated Development Environment (IDE). This method has proven to be an efficient and streamlined way to manage API interactions. Here’s a closer look at how this approach is enhancing my workflow: What Are .http Files? A .http file is a simple text file that defines HTTP requests. When equipped with the right extensions, .http files can be executed directly from some IDEs, such as JetBrains IntelliJ IDEA, WebStorm, or Visual Studio Code. This setup allows me to write and send HTTP requests without needing a dedicated API client tool like Postman or using curl commands in the terminal. Key Benefits of Using .http Files Convenience: I can stay focused in a single environment by enabling API testing within the IDE, minimizing context switching, and boosting productivity. Version Control Integration: Storing .http files in the project’s version control system allows my team and I to share, r...