Notes on data, AI, IT
and security
No marketing fog. The way I think about real problems with founders and managers.
DevOps is not a toolset, it is a culture change
Why companies that implement DevOps as a technology end up with expensive tools instead of faster releases - and where the real lever is.
Patching CVEs is a business decision, not just an IT task
Why vulnerability patching keeps getting delayed, what the real cost of that delay is, and how to frame it so it gets prioritised.
Data lake: why the lake turns into a swamp
Why the data lake concept fails without data governance, and how a manager can tell real value from architectural hype.
Privileged access: the insider threat matters more than the outer perimeter
Why controlling privileged accounts is the most underrated security lever for a manager, and how to set up sensible protection.
API gateway: a single entry point as operational discipline
Why an API gateway matters not just to developers but to anyone managing integrations, security, and operational costs.
Gradient boosting: the machine learning that already works in production
Why ensemble methods - random forests and gradient boosting - became the first real ML for business, and how a manager should think about them.
Kubernetes 1.0: container orchestration as the new operational normal
What the Kubernetes 1.0 release changes for production platforms, team responsibilities, and how companies run software.
Microservices and data: who owns what when you have many services
When a monolith is split into services, data becomes the main source of conflict. How to organise this without creating new chaos.
Machine translation is improving, but the enterprise gap remains
Why impressive results in neural translation do not mean a company can remove translators from its workflows.
Collaborative robots: safety before productivity
What a manufacturing manager needs to understand before cobots start working alongside people on the line.
Cloud costs: discipline matters more than scale
Why cloud bills start surprising companies long before any real scale arrives - and how to prevent it.
Password reuse is a corporate risk
How data breaches at third-party services become a threat to corporate accounts.