August 2018 Summaries

Boston, Massachusetts, stands out as a thriving tech hub, thanks to its extensive network of colleges and universities that nurture and support local talent through educational initiatives, networking opportunities, and funding for startups. The city's tech ecosystem is enriched by numerous community groups, meetups, hackathons, and boot camps, focusing on various fields such as AI, machine learning, data science, software development, and more. Key groups like Boston AI Meetup, Data Scientists for Gender Diversity, and Women Who Code Boston exemplify the diversity and inclusivity that characterize Boston's tech scene. Organizations such as Code for Boston and Tech in Motion further foster collaboration and innovation through civic technology initiatives and networking events. The presence of specialized groups for technology enthusiasts, including those focused on AWS, Docker, Kubernetes, and React Native, highlights the city's commitment to advancing technological expertise. The vibrant community has attracted companies like Logz.io, which values the diverse talent pool and innovative spirit, making Boston an ideal location for its U.S. office.

As organizations increasingly migrate workloads to the cloud, driven by the need for agility and reduced operational costs, careful planning is crucial to avoid potential pitfalls. Key strategies include identifying a suitable migration strategy, such as rehosting, replatforming, repurchasing, refactoring, or retiring unused resources, as well as considering licensing and migration costs, network management, and team expertise. Successful cloud migration also requires effective access management, starting with small-scale projects to identify gaps, automating repeatable processes, and maintaining diligent monitoring and governance. An agile approach is recommended to facilitate continuous learning and improvement throughout the migration process, with the ultimate goal of achieving lower operational costs and increased business flexibility.

Cybersecurity has become essential for organizations, yet many small businesses remain vulnerable due to misconceptions about their attractiveness to cybercriminals. Such businesses often underestimate the risks, thinking they are not significant targets, but attacks can occur for various reasons, including ideology or thrill. The financial impact of a security breach can be devastating, with costs averaging $20,000, making upfront investment in cybersecurity crucial. Key steps to enhance security include identifying critical assets, creating comprehensive cybersecurity policies, educating employees, regularly backing up data, verifying cloud service provider protections, and securing WiFi networks. Organizations are encouraged to stay informed about evolving security threats to maintain robust defenses, and this article serves as an introduction to a series on cybersecurity forensics and protection strategies.

Kibana is a powerful analysis tool that enables users to perform various search queries to extract relevant data and create visualizations and dashboards. While basic queries like free-text and field-level searches can sometimes be insufficient, advanced query types such as wildcards, fuzzy searches, proximity searches, boosting, regular expressions, and range queries offer more flexibility and precision. Wildcards and fuzzy searches help users find data despite spelling uncertainties, while proximity searches refine results based on word order in phrases. Boosting prioritizes specific terms in search results, and regular expressions provide complex pattern matching. Range queries are useful for numerical data, allowing users to specify value ranges in searches. Additionally, methods like _missing_ and _exists_ help identify documents with or without specific fields. Mastering these advanced searches involves understanding Elasticsearch's indexing process and experimenting with different query techniques, leading to more efficient data analysis with Kibana.

Yan Cui explores the evolving landscape of serverless computing and containerization, emphasizing their respective advantages and the growing trend of adopting a hybrid approach. Despite his preference for serverless, Cui acknowledges the rich ecosystem and dominance of container orchestration technologies like Kubernetes, while noting the rapid growth and adoption of serverless solutions such as AWS Lambda. The article discusses the trade-offs between control and productivity, with serverless offering significant productivity gains at the expense of control over infrastructure, whereas containers offer more control but require significant resources and expertise. Cui suggests that the future may see a convergence of these paradigms, where serverless and container technologies blend to offer the best of both worlds, allowing developers to focus on building products efficiently without being constrained by the underlying technology. The debate on vendor lock-in is addressed, arguing that the productivity benefits of serverless often outweigh the risks, and Cui calls for a focus on developing solutions that meet customer needs rather than being bogged down by technological factions.

In the rapidly evolving digital landscape, cryptocurrency markets, like many software domains, have been increasingly targeted by hackers, leading to significant financial losses such as the $731 million lost in the first half of 2018 alone. Notable breaches, such as the Cointhumb hack, reveal vulnerabilities stemming from inadequate security measures, underscoring the necessity for robust security protocols. This heightened threat environment has catalyzed the rise of DevSecOps, an approach integrating security into every phase of the software development lifecycle to preemptively address vulnerabilities. DevSecOps emphasizes early security integration, continuous monitoring, and seamless collaboration between development and security teams. Various tools like Continuum Security, ThreatModeler, and Aqua Security aid in embedding security measures within the continuous integration and delivery processes. While these tools enhance security, a cultural shift towards prioritizing security is essential, requiring management support and investment. By adopting DevSecOps and utilizing such tools, organizations can improve their security posture, ensuring more secure and timely software releases.

The article introduces a series on server monitoring, focusing on best practices for monitoring in a Unix-like environment. It emphasizes the importance of understanding server behavior and resource usage, especially when anticipating issues in test or production settings. Historically, server monitoring was a manual task, but advancements in tools have streamlined the process, requiring users to define the specific data they need. Key areas to monitor include CPU, memory, disk usage, page faults, uptime, network activity, and swap usage, with a variety of command-line tools available to assist in these tasks. The article underscores the need to adapt monitoring practices to changing application requirements and introduces several command-line tools such as top, htop, tcpdump, and nmon for comprehensive server analysis. The piece concludes by hinting at future topics in the series, including server security considerations.