Aditya Kulkarni
InfoQ
Pune, MH, India
Contact Aditya
Discover and connect with journalists and influencers around the world, save time on email research, monitor the news, and more.
| Recent: |
|
| Past: |
|
Past articles by Aditya:
How DevZero Enables Developers with Remote Development Environments
DevZero is a platform that provides developers with an efficient way to create and manage development environments. It's a cloud-based service that replaces the traditional local development environment with a scalable alternative. → Read More
Slack Open Sources Hakana, a Type Checker for Hack Language
Slack has recently open-sourced its type checker, Hakana. Based on Psalm and written in Rust, Hakana’s main objective is to enforce good code quality. Additionally, Hakana can also perform security analysis. Matt Brown, Senior Staff Engineer at Slack made the announcement in a blog post. → Read More
Google Cloud Adds New PCI DSS Policy Bundle
Google has recently added Payment Card Industry Data Security Standard (PCI DSS) Policy bundle to Anthos Config Management (ACM). In its version 3.2.1, security administrators can now understand compliance with PCI DSS requirements using the Policy Controller Dashboard. → Read More
Version 0.34.0 of Falco, an Open Source Runtime Security Tool was Recently Released
Falco, an open-source runtime security tool recently announced their latest release version 0.34.0. Highlights of the latest release include support for older RHEL distros, the ability to download and update Falco rules at runtime, and the experimental release of a modern eBPF probe. → Read More
gopaddle, a Low Code Internal Developer Platform for MicroK8s and Edge
gopaddle is a low-code internal developer platform (IDP) for MicroK8s edge cloud. It aims to simplify and accelerate the development of edge cloud applications by providing a web-based interface to Kubernetes developers for creating, deploying, and managing applications. → Read More
Octosuite: A GitHub Open Source Intelligence Framework
Octosuite, an open-source intelligence (OSINT) framework, recently released its latest version 3.1.0. Octosuite provides a wide range of commands to investigate publicly-visible GitHub accounts and repositories through GitHub’s Public APIs. Written in Python, Octosuite provides a secure and user-friendly interface to easily search and explore data related to a repository, organization, or user. → Read More
Learnings from Spotify Mobile Engineering’s Recent Platform Migration
Recently, Spotify Mobile Engineering Team elaborated on their experience with a recent platform migration. Working on an initiative under the Mobile Engineering Strategy program, the team migrated their Android and iOS codebases to build with Bazel, Google’s open-source build system. → Read More
Snyk Announces General Availability of Snyk Cloud and Enhancements to its Platform
Snyk, a developer security platform, recently announced the general availability of their cloud security tool, Snyk Cloud, and improvements to their platform. Extending support for software bill of materials (SBOM), the improvements include new reporting capabilities and self-service resources. → Read More
Spotify Introduces Kitsune Vulnerability Management Platform
Spotify recently introduced its security vulnerability management platform, Kitsune. Right from vulnerability detection to providing insights based on metrics, Kitsune manages the overall security vulnerability lifecycle. Kitsune’s development started one and a half years ao and it continues to evolve. → Read More
CNCF Accepts Istio as an Incubating Project
The CNCF recently announced that it has voted to accept Istio as incubating project. Initially developed by Google and IBM alongside the Lyft team, Istio is the most widely adopted service mesh. The Istio steering committee shared the announcement in a blog post, reflecting on Istio’s journey from 2016. → Read More
Scaling Access Management at Airbnb
Airbnb's product engineering team recently discussed their implementation of a self-serving, centralized access control platform. Built on the principle of least privilege, the team designed a five-stage architecture, providing benefits from security, usability, and developer experience aspects. → Read More
Google Cloud Announces Curated Detection in Chronicle SecOps Suite
Google Cloud recently announced general availability of curated detections as a part of Chronicle SecOps Suite. Using the out-of-the-box threat analytics, security operations teams can now detect cybersecurity threats proactively and take relevant actions. → Read More
GCP Announces MITRE ATT&CK Mappings to Implement Security Controls
Google Cloud Platform (GCP) recently announced the MITRE ATT&CK Mappings to improve security controls across the Google Cloud workloads. MITRE ATT&CK framework is a globally-accessible knowledge base of adversary tactics & techniques based on real-world observations. The mappings will empower Google Cloud users to assess the GCP controls against adversary tactics, techniques and procedures(TTPs). → Read More
Standardising Observability and Incident Management at Miro
The Miro Data Engineering team recently discussed how they systematised alerts and incident management. Along with standardising the observability metrics and alert(s) definitions, the team started using OpsGenie for incident management. This helped the team address challenges with scaling such as standard format for metric labelling, alert definitions, on-call duties, etc. → Read More
Adopting Remote Development Environments at Slack
The Slack internal tools team recently talked about utilizing remote development environments in their application development workflow. By January 2022, over 90% of engineers had started using the remote development workflow at Slack, which lead to an increase in developer productivity. → Read More
BLST Security Extends Support for OpenAPI Specification Table
BLST Security recently released the latest version of its platform, enabling DevOps and Application Security teams to avoid API specification flaws. The BLST platform aims to help teams understand their APIs by creating an OpenAPI Specification table. → Read More
CNCF Accepts KubeVirt as an Incubating Project
Recently, the CNCF promoted KubeVirt from the sandbox to incubating project level. KubeVirt enables users to run virtual machine workloads on top of Kubernetes in a Kubernetes-native way. → Read More
Managing Complex Dependencies with Distributed Architecture at eBay
The eBay engineering team recently outlined how they came up with a scalable release system. The release solution leverages distributed architecture to release more than 3,000 dependent libraries in about two hours. The team is using Jenkins to perform the release in combination with Groovy scripts. → Read More
Dynatrace Application Security Gates Catalyze Secure Automated Releases
Dynatrace recently announced the availability of “security gates” on its software intelligence platform. Organizations can now use Dynatrace Application Security gates to check security vulnerabilities early in the software development lifecycle and trigger required remediation actions. → Read More
Site Reliability Engineers and the Specialist Mindset
A site reliability engineer (SRE) can be a generalist or specialist. Recently, the team at Blameless elaborated on the advantages of a specialized SRE team. The specialist nature of the SRE role can be highlighted from the recruitment process. Depending on the individual skillset, organizations can engage an SRE in a number of specialist roles. → Read More