As part of my work over the last couple of years I have gotten increasingly interested in information security and how it applies to software development and systems administration. My experiences with the devops community have shown how powerful bringing together skilled communities can be, but for the most part the security folks are absent from developer discussions.

I managed to get a bunch of my thoughts, along with lots of code examples and ideas, down into a presentation for the recent Monitorama conference. The talk centred around two arguments:

• that continuous delivery, ie. the increasingly rapid releasing of…

I'm a big fan of the Platform as a Service (PaaS) model of operating web application infrastructure. But I'm a much bigger user and exponent of Infrastructure as a Service (IaaS) products within my current role working for the UK Government. This post describes why that is, and hopefully helps anyone else inside other large enterprise organisations reason about the advantages and disadvantages, and helps PaaS vendors and developers understand what I personally thing is a barrier to adoption in that type of organisation.

A quick word of caution, I don’t know every product inside out. It’s very possible a…