Loading summary
Rick Howard
You're listening to the Cyberwire network, powered by N2K.
Nyla Genoi
And now a message from our sponsor. Zscaler, the leader in cloud security Enterprises have spent billions of dollars on firewalls and VPNs, yet breaches continue to rise by an 18% year over year increase in ransomware attacks and a $75 million record payout in 2024. These traditional security tools expand your attack surface with public facing IPs that are exploited by bad actors more easily than ever with AI tools. It's time to rethink your security Zscaler Zero Trust plus AI stops attackers by hiding your attack surface, making apps and IPs invisible eliminating lateral movement Connecting users only to specific apps, not the entire network continuously verifying every request based on identity and context simplifying security management with AI powered automation and detecting threats using AI to analyze over 500 billion daily transactions hackers can't attack what they can't see. Protect your organization with Zscaler Zero Trust and AI. Learn more@zscaler.com Security.
Daniel Chalmo
The word is digital transformation, spelled digital as in available in electronic form and readable and controlled by a computer and transformation as in a change in form, form, appearance, nature or character definition. The use of technology to radically improve the performance or reach of the business Example sentence the pressure to cut expenses, minimize risk and keep up with the demands of evolving customers requires companies to adopt a holistic approach to leveraging digital transformation, origin and context, according to Daniel Chalmo, Christopher Williams and Luke Boardman in their paper Digital Transformation of Business Models. They highlight that back in the 90s, even though purchases were still primarily made inside brick and mortar stores, often with cash, mass media advertising started tapping into smart devices and social media platforms as methods customers use to communicate communicate with businesses. Businesses started to see that they were now able to communicate digitally with their customers on an individual basis and often in real time. By August 2004, when Larry Page and Sergey Brin took Google public, they also made an internal game changing decision about how to manage their growing digital infrastructure. Instead of handing the task off to the traditional network management and IT management teams, they gave the task to the development team and essentially invented the idea of infrastructure as code six years before we had a name for it. By 2010, some startups realized that they could gain a competitive edge by deploying their products through this model. They would combine the development and operational functions into one DevOps process, using code as the glue. By doing this, they became more agile in their ability to respond to customer needs compared to Their larger competitors, who still kept development and operations separate. These old brick and mortar companies might take two years to deploy new functionality to their website. Even the digitally transformed startups were bragging about 10 new deployments a day. Nerd Reference Back in 2009, two Flickr employees, John Auspaugh, senior Vice President of Technical Operations, and Paul Hammond, Director of Engineering, gave a now famous presentation at the Velocity 2009 conference titled 10 Deploys per Dev and Ops Cooperation at Flickr, leading to the concept of a new role combining developers and operations. In other words, DevOps.
Rick Howard
From a development point of view, one of the most important things you can do is to set up one step build. And what we mean by that is everything you need to do to take the code that is currently in your source control system in SVN and turn that into a set of files that can be copied onto a production server and run the site. The screenshot that I'm showing on the screen right now is part of Flickr's internal development admin interface. This is the build and stage button, the button at the very bottom of the screen, the one that says perform staging. You click that button, it performs an SVN checkout, it does all of the translations, it compiles all the templates. Anywhere where we have compilation that we do for optimization, it does all of that and then it copies that code onto a staging service that we can test it automatically. Automatically, which means that you don't have.
Paul Hammond
People running this command. And then you run this command. As it turns out, computers are really good at running commands the same time and the same order over and over again.
Rick Howard
Once you've got that one step build, the next thing you need is a one step deploy. This is Flickr's internal admin tool for deploying. We have a button, it says I'm feeling lucky. And you push that and it pushes the code out to the site. And the same principles apply here. By making it one button, it means that there's very, very little room for error. It means that you're doing your builds and you're doing your deploys in a consistent environment. It means that there's no manual steps that might go wrong.
Paul Hammond
This is the way we do things. But you see this as a trend. Continuous deployment and continuous integration is starting to show up in a lot of operational tools and even vendors selling things and open source projects as well. So it's just a good ide.
Daniel Chalmo
Word Notes is written by Nyla Genoi, executive produced by Peter Kilpe and edited by John Pettrick and me, Rick Howard. The mix, sound, design, and original music have all been crafted by the ridiculously talented Elliot Feltman. And thanks for listening. Foreign.
Peter Kilpe
Cyber threats are evolving every second, and staying ahead is more than just a challenge, it's a necessity. That's why we're thrilled to partner with Threat Locker, the cybersecurity solution trusted by businesses worldwide. ThreatLocker is a full suite of solutions designed to give you total control, stopping unauthorized applications, securing sensitive data, and ensuring your organization runs smoothly and securely. Visit threatlocker.com today to see how a default deny approach can keep your company safe and compliant.
Podcast Summary: Hacking Humans – Episode on Digital Transformation
Title: Digital Transformation (Noun) [Word Notes]
Host/Author: N2K Networks
Release Date: February 11, 2025
Description: Exploring deception, influence, and social engineering in the realm of cybercrime, this episode delves into the multifaceted concept of digital transformation and its implications for businesses navigating the modern technological landscape.
The episode opens with Daniel Chalmo providing a comprehensive definition of digital transformation:
"Digital as in available in electronic form and readable and controlled by a computer and transformation as in a change in form, form, appearance, nature or character."
[01:34] Daniel Chalmo
He emphasizes that digital transformation involves leveraging technology to radically improve business performance and reach, addressing pressures such as cost-cutting, risk minimization, and meeting evolving customer demands.
Chalmo, alongside Christopher Williams and Luke Boardman, reference their paper, Digital Transformation of Business Models, to trace the origins and development of digital transformation:
1990s: Despite purchases being predominantly in physical stores, mass media began utilizing smart devices and social media platforms to communicate with customers on an individual and real-time basis.
2004: The IPO of Google marked a pivotal moment when founders Larry Page and Sergey Brin shifted the management of their expanding digital infrastructure from traditional IT teams to the development team, effectively pioneering the concept of infrastructure as code six years before the term was coined.
2010: Startups recognized the competitive advantage of integrating development and operations into a unified DevOps process, using code as the cohesive element. This integration allowed for greater agility in responding to customer needs compared to larger competitors who maintained separate development and operations teams.
Chalmo underscores the stark contrast in deployment speeds:
"These old brick and mortar companies might take two years to deploy new functionality to their website. Even the digitally transformed startups were bragging about 10 new deployments a day."
[01:34] Daniel Chalmo
The discussion transitions to DevOps, a transformative approach blending development and operations to enhance efficiency and responsiveness:
In 2009, Flickr's senior leaders, John Auspaugh and Paul Hammond, presented a seminal talk at Velocity 2009 titled "10 Deploys per Dev and Ops Cooperation at Flickr," which became foundational in conceptualizing DevOps roles.
Paul Hammond comments on the growing trend:
"Continuous deployment and continuous integration is starting to show up in a lot of operational tools and even vendors selling things and open source projects as well. So it's just a good idea."
[05:57] Paul Hammond
Rick Howard elaborates on best practices essential for effective digital transformation, particularly in build and deployment processes:
One-Step Build: Simplifies the process of converting source code into deployable files.
"Everything you need to do to take the code that is currently in your source control system in SVN and turn that into a set of files that can be copied onto a production server and run the site."
[04:34] Rick Howard
One-Step Deploy: Streamlines the deployment process to minimize errors and ensure consistency.
"By making it one button, it means that there's very, very little room for error. It means that you're doing your builds and you're doing your deploys in a consistent environment. It means that there's no manual steps that might go wrong."
[05:30] Rick Howard
Paul Hammond emphasizes the role of automation in modern development practices:
"People running this command. And then you run this command. As it turns out, computers are really good at running commands the same time and the same order over and over again."
[05:21] Paul Hammond
This highlights the shift towards automating repetitive tasks to enhance reliability and efficiency in deployment pipelines.
The episode concludes by reinforcing the importance of adopting continuous integration and continuous deployment (CI/CD) practices. The integration of development and operations through DevOps not only accelerates deployment cycles but also fosters a culture of collaboration and agility within organizations.
Daniel Chalmo wraps up the main content, transitioning into credits and acknowledgments, underscoring the collaborative effort behind the episode.
Notable Quotes:
"Digital as in available in electronic form and readable and controlled by a computer and transformation as in a change in form, form, appearance, nature or character."
[01:34] Daniel Chalmo
"These old brick and mortar companies might take two years to deploy new functionality to their website. Even the digitally transformed startups were bragging about 10 new deployments a day."
[01:34] Daniel Chalmo
"By making it one button, it means that there's very, very little room for error. It means that you're doing your builds and you're doing your deploys in a consistent environment. It means that there's no manual steps that might go wrong."
[05:30] Rick Howard
"Continuous deployment and continuous integration is starting to show up in a lot of operational tools and even vendors selling things and open source projects as well. So it's just a good idea."
[05:57] Paul Hammond
This episode of Hacking Humans offers valuable insights into the evolution of digital transformation, the critical role of DevOps in modern business operations, and best practices for building and deploying software efficiently. By examining historical developments and current trends, listeners gain a comprehensive understanding of how businesses can leverage technology to stay competitive and responsive in a rapidly changing digital landscape.