A troubleshooting story about an intriguing GitHub issue: a developer could clone a GitHub repository successfully, however failed to push updates to it.
I explain in detail the cause is GitHub’s permission model for forked repositories within organizations that enforce SAML SSO.
The solution is simple in hindsight: authorize your SSH key for use with SAML SSO for GitHub organizations that require that.
Deep dive into PostgreSQL WAL management, replication slots, and their critical impact on Change Data Capture implementations.
An issue with our Snowflake connector for PostgreSQL revealed how a simple formatting oversight—missing newline characters in a private key file—can bring down an entire service. This post walks through the debugging process that uncovered why our Kubernetes pod was stuck in CrashLoopBackOff, traces the root cause back to Azure Key Vault, and shares preventive measures to help you avoid similar cryptographic formatting issues in your deployments.
Six AI coding assistants tested: GitHub Copilot, Claude Code, Cursor, Windsurf, Kiro, and Gemini CLI. Through hands-on testing with Rust and React projects, I discovered each tool’s strengths and surprising limitations. Learn which AI coding agent matches your development workflow.
Discover how architectural choices can be a defense in securing agentic AI systems. This comprehensive guide explores OWASP’s latest “Securing Agentic Applications” paper, covering everything from Sequential and Hierarchical architectures to the 15 critical threat categories facing autonomous AI applications. Learn practical implementation strategies, universal security principles, and how to build trust into your agentic AI systems from the ground up.
Dive into the discussion around integrating Kafka consumers within the Backend for Frontend (BFF) pattern. Learn when it’s a powerful tool for real-time UI updates and data projections, and critically, when business logic should remain separate for architectural health and scalability.
Hands-on review of Google’s new Gemini CLI. Covers sandbox mode, auto-code generation and configuration options.
OpenAI Codex is a new cloud-based software engineering agent from OpenAI that includes an open source reference base docker file.
no time, jump straight to how to Protecting yourself in the age of vibecoding and Secure AI-assisted development Artificial intelligence has revolutionized software development, with […]
An AI-driven threat software engineers need to watch out for — when large language models hallucinate fake but plausible package names, and bad actors register them for malicious use. As AI-generated code becomes more common, verifying package names is no longer optional. Learn what slopsquatting is, why it matters, and how to protect your code.
Copyright © 2003 - 2024 | lotharschulz.info