AJ Warnock

New VSTS SDL Template

AJ Warnock — Wed, 01 Jul 2009 13:57:14 GMT

Using the SDL? if not, you should be considering it…

Having blurred the line between development and Test Engineering at our organization, I am finding out how little our development team(s) knows about secure development practices. Not a good thing. Recently, Microsoft released the SDL process template for VSTS and I think it’s going to help.

So, if you have not seen this it is a nice start at helping ensure secure development practices are used by your team. Hmmm, amazing what a little process, a little knowledge and a nice video can achieve?

So, check it out Here at the Microsoft Security Development Center.

Obsolete? Is it really....

AJ Warnock — Wed, 20 May 2009 15:08:23 GMT

Recently, I have been noticed numerous of blogs, articles and other sources reminding me of the technologies, techniques and practices that the software development industry has begun to discard and developers are or should be ignoring. While many of these are obvious obsolete technologies that have been replaced by others across all modern and common platforms; there are many that are still necessary in today’s software development environments and organizations.

The techniques to which I am referring are low level coding skills, memory management, code optimization and performance optimizations. I know that every application does not require the “optimized” and “superlative” implementation and performance, but many environments still do require better performance and resource management than our tools can provide. To ignore and discard these techniques as un-necessary and obsolete would be similar to saying that we don’t need to learn to add, subtract or divide since we all have cell phones and computers which always have a calculator application.

What concerns me most about this trend is that it targets several of the most complex, intricate and challenging areas of expertise that are still completely necessary in many of our more limited environments. And even in our more contemporary platforms, these areas are no where near maturity. I know we are advancing technology at a fast pace and will outgrow some of these issues, but I am tired of waiting (possibly un-necessarily) when I run multiple applications at the same time on my portable devices. And I know as an engineer, even the best of these platform based solutions are not nearly as efficient as what a highly skilled engineer can do.

Yes, most applications to have very acceptable performance do not have to be optimized and there will always be those one-off or quick and dirty implementations due to other time or business constraints. BUT, we need to consider that we have not reached the “nirvana” that many platform developers, tool developers and academics would like us to believe. When the complex code we rely on is so bloated, inefficient and hidden behind the scenes; how do we debug, accurately test and correct any issues without understanding the techniques used. If these techniques are further blurred by poor implementations, excessive code and disproportionate resource requirements then; the performance and quality of our applications will suffer. Especially, when we are running multitudes of these applications on server implementations in virtual environments all on the same hardware platform; while it may not be the perfect storm, it sure sounds like a hurricane to me.

So, before we ignore these highly valuable skills and techniques because they are not so pleasant to many of us and very difficult to most; I think we should remember that there is still a great demand and need for engineers capable of developing, debugging and appreciation of low level, embedded and complex technology skills.

The trick is to not only have the expertise but also the wisdom and sense to determine when and where they need to be applied. Yes, we may need fewer people with these proficiencies but like many skills, historically, the rarer the “required” skill set is the more valuable the resource is…

Ahh, got a bug… it sounds like a job for “super geek” and he is not cheap!

PEX! DevLabs & More...

AJ Warnock — Tue, 10 Mar 2009 20:17:45 GMT

While attending a Microsoft Developer Event today (the VSTS Fire Starter in Tampa), I was reminded by Joe Healey that it is my civic duty to write a blog entry at least once a year. That being said, I find that next week would be the 1st anniversary of my last Blog post. To those who actually read my blog, I apologize and to those who didn’t I apologize for making you read this one

First, thanks to all who presented at the event, it was enjoyable and informative. To anyone who missed, I would recommend that you consider going to the Orlando .NET Code Camp (http://www.orlandocodecamp.com) and check out the VSTS sessions presented by Catapult Systems. Last but not least, if you are not aware of the Microsoft DevLabs site I would like to introduce you to it http://msdn.microsoft.com/en-us/devlabs. I, recently, stumbled across it due to one of the recent additions from last December…

Let me introduce you to PEX if you have not seen the project, it is an interesting project to implement “White Box Testing for .NET”. The name PEX is derived from Program Exploration and the tool produces a traditional unit test with high code coverage. Although, it is in its early stages of development, I must admit the concept of using automated code exploration and execution analysis to automatically generate a systematic and somewhat intuitive white box test is definitely a good thing. Yes, I know that using code coverage as a measure of testing and software quality is relative and not a true accurate measure of how well we test. However, when used in conjunction with other test quality metrics it does give a more complete picture of the quality of the code. So, I would check this one out The PEX Site.

And, by the way; while you are at DevLabs site, I would also recommend you check out the Code Contracts and Small Basic projects too. I, am looking forward to playing with all of these tools.

Enjoy!

Empower for ISV's?

AJ Warnock — Wed, 19 Mar 2008 17:06:54 GMT

So, if you’re a small independent software provider in need of an inexpensive way to license MSDN, several internal use licenses for Vista, XP, Office; in addition to, SQL Server® 2005, Exchange Server, SharePoint® or Windows Server; you may want to check out this program.

The Microsoft Empower for ISV Program is an initiative for independent software vendors creating new software solutions using Microsoft® technology. Membership gives you access to essential development tools, resources, and support. This is all available for U.S. $375 per year.

This is really not bad when you consider the annual subscription for MSDN alone. For more information and to see if you qualify go to Microsoft Empower for ISV Program (http://www.empowerforisv.com/)

Free Exams... Free Training... and Great Topic!

AJ Warnock — Thu, 13 Mar 2008 19:16:16 GMT

So, Mike Wells was kind enough to pass this information on to me so I will do the same…

Register to Be the "First to Know" and Save on Your Exams (Worldwide)

Know when Visual Studio 2008 and SQL Server 2008 exams are available and save 40% on selected exams in your track.

Try Your Choice of Microsoft E-Learning for Free (U.S. only)

For a limited time, you can try Official Microsoft E-Learning for free! Choose from 1,400 hours of IT professional and developer content covering all of the latest technology from Microsoft.

Also, the Sarasota SQL Server Developers group meeting is tonight at the Community Foundation of Sarasota. Rob Hatton, leader of the Tampa SQL Business Intelligence Group, will be giving his presentation Designing Analysis Services Cubes.

Designing an Analysis Services Cube
Designing an Analysis Services cube is a completely different undertaking than designing a relational database. This presentation will cover the steps needed to design a cube, as well as the fundamental concepts needed for a good design.

This is a must see presentation for anybody that is new to working with cubes or wants to learn about Analysis Services. Please RSVP for this event.

Register for the Sarasota SQL Developers Group Meeting

Free eBooks from MS and Tampa SQL Saturday!

AJ Warnock — Thu, 14 Feb 2008 16:31:01 GMT

Want some free Microsoft eBooks…

You can get some free MS eBooks and Visual Studio eLearning at: Microsoft Visual Studio Learning Portal

This is a great place to keep up with the latest Visual Studio training opportunities from Microsoft.

Check it out…

Don’t Forget, the 2008 Tampa SQL Saturday is this weekend. For more information, go to: 2008 SQL Saturday

Enjoy!

South Florida CodeCamp!

AJ Warnock — Fri, 01 Feb 2008 15:31:01 GMT

Free Food, Giveaways, raffles, and GREAT Free Training.... Sounds like CodeCamp!

The South Florida CodeCamp is tommorrow, so don't miss this one if you can be there. You need to sign up at http://www.clicktoattend.com/?id=122048

Don't miss this opportunity to learn, network and just have fun.

Visual Studio 2008 Links

AJ Warnock — Tue, 29 Jan 2008 16:26:15 GMT

With all of the information out there about the Visual Studio 2008 features, updates and requirements, it is hard to filter through some of it. However, if you are interested in learning more here are a few good places to look and check out.

Interesting Visual Studio 2008 C++ Beta Info (Thanks for the info MSDN Flash Newsletter!)

There is a Microsoft Foundation Class update in the Visual C++ 2008 Feature Pack beta, and we'd like to follow that up with a reminder that the Visual C++ 2008 Express Edition is also available as a powerful and flexible development environment for creating native Win32 and Win64 applications, not to mention cool 2D/3D games. Also, Microsoft and The Game Creators have partnered to deliver the Development Kit for Visual C++ 2008 Express Edition, a free 2D/3D game development library for Visual C++ 2008.

Also, for all those in South Florida; don't forget the CodeCamp this weekend!

So, if you find some time to research have fun.

Want to configure VS2008 for .Net Source

AJ Warnock — Mon, 21 Jan 2008 14:52:09 GMT

It appears that last week, Microsoft release the source code for several of the .Net 3.5 Framework libraries and according to ScottGu more will be coming soon. For a list of what is available make sure you check out Scotts Blog at http://weblogs.asp.net/scottgu/archive/2008/01/16/net-framework-library-source-code-now-available.aspx

So, if you want to see how to configure your VS2008, Shawn Burke has a great Blog entry here http://blogs.msdn.com/sburke/archive/2008/01/16/configuring-visual-studio-to-debug-net-framework-source-code.aspx. That gives all the details.

So, check these site out and Thanks Scott and Shawn for the Info.

Visual Studio 2008 Launch Event Registration

AJ Warnock — Mon, 14 Jan 2008 19:12:42 GMT

While the Microsoft Visual Studio Luanch event registration site has been up for the LA registration, it appears that they have opened registration to the public for most of the other locations. Yes, there are a few that are still not open so keep a watch but if your in one of the other lucky cities to have a chance you should check it out.

Be the first to register in your area....

Heres the link: http://www.microsoft.com/heroeshappenhere/register/default.mspx

It's LAST DAY!

AJ Warnock — Mon, 31 Dec 2007 17:15:36 GMT

Again, it is LAST DAY! So, it is time to make all of those resolutions that we always intend to keep but often don't seem to quite achieve. So, if one of your resolutions is to get more involved with local development groups and learn all about the latest technologies then here are a few things to Checkout:

Sarasota .Net Developers -- http://www.sarasotadev.net
Sarasota SQL Developers -- http://www.sarasotasql.net
Tampa Bay IASA January -- http://www.eventbrite.com/event/89609023

You can find many links on both of these sites for other surrounding area development groups in Florida. Also, if you want to know the latest information on Microsoft Events, CodeCamps and More. Check out this site,

Joe Healey's Site -- http://www.devfish.net

Last but not least, check out these sites for more Tampa, Sarasota and Orlando Geek News and Activities.

Community Credit -- http://www.community-credit.com/
CodeBrew -- http://www.flacodebrew.net

Happy Last Day and Good Luck in the New Year!

Want a free eBook from Microsoft...

AJ Warnock — Mon, 10 Dec 2007 15:59:51 GMT

If you ant a free eBook from Microsoft then check out this Microsoft eLearning page.

http://www.microsoft.com/learning/vstudio/2008/default.mspx

Also, don't forget to check out the information on the Microsoft Launch events coming this spring. They can be found here.

http://www.microsoft.com/heroeshappenhere/register/default.mspx

Enjoy!

New Tampa International Association of Software Architects (IASA)

AJ Warnock — Mon, 08 Oct 2007 14:34:52 GMT

Well, the long awaited start for this organization is finally upon us. Thanks Tom Fuller!

After a couple of attempts and false starts the Tampa Bay Area chapter is finally going to have our first meeting! The meeting will be held in Tampa at the Microsoft corporate offices at 6:30 pm on Tuesday October 30th (for directions see the registration link below).

The high level agenda for this meeting is as follows:

1. Eat free pizza

2. Discuss the group logistics (how often should we have meetings, when should we have them, would anyone like to volunteer, discuss the IASA objectives)

3. Collect ideas for upcoming sessions

4. Announce upcoming events interesting to the architect community

5. "The Role of the Software Architect" by Jeff Barnes (Microsoft Architect Evangelist)

6. Wrap it up (give away door prizes)

In order to get a good ballpark number of attendees Tom asks that you register at

Please forward this email on to anyone you think may be interested and, of course, Attend yourself!

https://www.clicktoattend.com/invitation.aspx?code=121438.

Agile Nirvana?

AJ Warnock — Thu, 16 Aug 2007 18:53:10 GMT

Thanks Joe Healy and Mike Wells!

If you were fortunate enough to attend either the Sarasota Developers Group meeting or the new Sarasota SQL developers group meeting on Tuesday night, I am sure that you will join me in thanking both of the speakers. I have been told that there are plans to ensure that the meetings are scheduled on different evenings in the future.

I also was reminded that I have been negligent in maintaining my blog, so I will again resolve to do a better job in the future. My current responsibilities both professional and personal leave little time lately to experiment, write or even keep up with the reading list. A balance must again be found.

So speaking of balance; I was recently confronted with a question that truly intrigued me. How does one know that they have achieved agility nirvana? So many times I hear of people skipping necessary processes, testing and deliverables all in the name of agility. Yes, according to the agile manifesto, agility stresses individuals and interactions over processes and tools; working software over comprehensive documentation, customer collaboration over contract negotiation and responding to change over following a plan BUT it does not give license to ignoring common sense and required-processes, -documentation and -requirements contracts.

I know I that many shops require unnecessary steps and processes to be performed regardless of the need or relevance; however, I can not conceive of a case where a secondary code review either manual or automated would be optional. Even if this is merely a single line change, an informal check by another developer would meet this requirement. But, I hear from many that code reviews are omitted since they are useless since our development staff is highly adept and agile. Besides, code quality, implementation methodology and appropriateness are quite subjective, controversial and irrelevant if it meets the customer communicated functional requirement (BTW, that was a verbal or email request because written change documents are excess documentationJ ). Is this agility or fragility?

What about security reviews, usability reviews and regression testing? Are these merely excess and unnecessary processes? I am sure that each case is different, however, what about coding-, -development, -deployment and UI-standards and best practices. Does your development team possess, maintain and require the use of these documents or concepts in an easily accessible repository?

So many people use agility as an excuse to cut corners, skip required processes and produce deliverables in an exaggeratedly rapid but haphazard manner. This is not agility or agile development. We cannot forget that the appropriateness, quality, usability and performance of the deliverable every bit as important as minimizing development time and expenses. We must continue to remember to apply agile practices to our development processes and remain both agile and adept at ensuring that our deliverables meet the dynamic requirements.

So, are you an AGILE developer or a FRAGILE developer? If you think you have reached agile nirvana you may want to reconsider…

A Day of AJAX! Free Event

AJ Warnock — Fri, 15 Jun 2007 14:53:58 GMT

A Day of AJAX in Tampa!

So, if you are in the Tampa Area and have not heard about this event you should check into it. There will be a free event at the Microsoft Office in Tampa on June 21, 2007. This event will be an entire day of AJAX training featuring Jim Zimmerman, Jay Kimble and our very own Developer Evangelist Joe Healy. Check it out here and make sure you register since space is limited.

Click Here To Register!