Operations | Monitoring | ITSM | DevOps | Cloud

For the past five years, CircleCI has hired third-party penetration testing firms that hammer our product releases or infrastructure at minimum every 90 days. To date, we’ve done more than 25 of these. Sometimes they cover new product features and other times they cover infrastructure.

JFrog has recently disclosed a directory traversal issue in CivetWeb, a very popular embeddable web server/library that can either be used as a standalone web server or included as a library to add web server functionality to an existing application. The issue has been assigned to CVE-2020-27304.

This article was born of necessity. Chatting with my editors at Auvik, I went looking to see what kinds of advice other sites had on SysAdmin tools you should have handy to do your job. Two things immediately struck me: Now don’t get me wrong, software is important to have. But what if you can’t access that device to use the software? What if there’s a (gasp!) physical issue that needs to be addressed, and you have to get some hands-on time with some racks?

In a perfect world, small pieces of software scale up and down with a high-performance message broker like a heart, pumping data in a controlled, efficient manner. However, at some point, in every single system, an application starts pumping out large data requests, in a sporadic, uncontrollable manner. Because here, we are talking about the real world, right? In this article, we will address the problem of adapting a legacy system to play with a stream-based platform.

Ubuntu 21.10 is the latest release of Ubuntu and comes as the last interim release before the forthcoming 22.04 LTS release due in April 2022. As the interim releases are often proving grounds for upcoming features in the LTS releases, this provides a good opportunity to take stock of some of the latest security features delivered in this release, on the road to 22.04 LTS.

Like the historic space race, the competition to plant the flag of DevOps is blasting off. According to market intelligence firm IDC, global business will invest $6.8 trillion in digital transformation by 2023. Yet research also suggests that 70 percent of them will fail to meet their goals. JFrog was the first company to offer a universal, hybrid, end-to-end DevOps platform.

Flexibility is one of the cloud’s biggest benefits, but also one of its biggest challenges. When you have different teams using resources in the cloud and deploying instances at the click of a button, your cloud environment could easily become chaotic. Without a definitive plan governing your cloud operations, your costs will inevitably spiral out of control. A cloud cost strategy is your action plan for managing costs and staying profitable while working and building products in the cloud.

As CFO of Virtana, I face many of the same challenges as every CFO of a SaaS or enterprise software company today: cost containment, surprises, and an ever-escalating AWS bill. We all need help keeping these things in check. These challenges become even more difficult when your organization goes hybrid cloud. Fortunately, there are tools out there to help our teams help us manage these costs.