Operations | Monitoring | ITSM | DevOps | Cloud

In November 2023 we discovered an issue in the Go standard library’s net/http.Client that allowed an attacker who controls redirect targets on a server to exfiltrate authentication secrets. Soon after, we discovered a similar issue in net/http/cookiejar.Jar. The issues, collectively designated CVE-2023-45289, have now been fixed in Go 1.22.1 and Go 1.21.8, released on March 5, 2024. This blog post dives into the technical details behind those two bugs and the patch that addresses them.

For Android developers, test automation on CI/CD platforms such as CircleCI has become an indispensable part of the development workflow. But merely implementing automated testing is no longer enough to remain competitive and continue to develop at speed. Developers must also work to continuously monitor, maintain, and improve their test automation. As an application grows in complexity, the scale of development grows, as does the number of automated tests.

Software engineering key performance indicators (KPIs) help engineer leadings keep teams accountable while ensuring focus on highest leverage activities. They are essential for driving process improvement, managing risks, supporting data-driven decision making, and ensuring customer satisfaction. Without KPIs, teams may encounter challenges related to visibility, efficiency, decision-making, quality, and customer satisfaction, which can ultimately impact project success and organizational performance.

An Internal Developer Platform (IDP) is an ecosystem that empowers developers to manage the entire application lifecycle from development to deployment autonomously. As a vital component for organizations, the implementation of an IDP often presents a ‘Build vs. Buy’ dilemma: should you construct your own IDP, tailored to your unique needs, or would it be more efficient to purchase a pre-built solution?

In a world of too many acronyms and initialisms, we’re here to talk about one more – TDM, aka DevOps test data management.

The ELK stack, which stands for Elasticsearch, Logstash, and Kibana, is a powerful suite of tools used for searching, analyzing, and visualizing log data in real time. Within a software company's infrastructure, this stack can be utilized in several key areas to improve operational efficiency, debug issues, and gain insights into user behavior. The ELK stack provides a centralized platform for aggregating logs from various sources.