What's going on? 2026-01-04
Let's regain that focus on our goals and focus on what is in our control
The holidays are officially over for me. We’re back to work at full bore. Hopefully people haven’t given up on their New Year’s Resolutions so far. This is going to be the first real week of the year for testing people, so start off on the right foot. Stay focused.
I’ve got a handful of things I want to write about that are half way done, but here are some other things I’ve read over the past couple of days that grabbed my attention.
When “No CVEs” Isn’t a Security Guarantee: What the Latest Angular Vulnerabilities Reveal About Open-Source Risk - The conclusion of this article is where the message needs to be. A quiet list of updates or news doesn't mean your software is secure. It means it isn't being examined. Regular audits, security reviews, pen tests and maintenance is critical for the security of your system.
Software craftsmanship is dead - I felt this one. The further in my career I get, the more I see pressure for speed to market taking over. It reminds me of when I was an intern, and XBox games started getting patches over the internet. My mentor explained how it will result in a greater urgency to ship garbage, and fix it later. With vibe coding coming around, won't it get worse?
The HBR Charts that Help Explain 2025 - How are people using AI in 2025? How do people feel about the economy, and how does that pair with their news source? What about their level of joy in life? There's a great section at the end that talks about when to use different coaching styles that seems like common sense, but sometimes reviewing it always seems nice.
Qodana - I've been using this on some of my personal projects as a way to run static analysis on my projects and see what other tools are out there. It is my own personal project, so it may take some time to figure out how good this is for teams.
