Archive for May, 2009

SDL – Guilty as charged, I missed the updated documentation!!

Friday, May 29th, 2009

With all the recent SDL excitement of the new TFS template, which appears on the surface to be a nice concept suffers from the fact that is doesn’t appear fundamentally integrated into the other templates yet (more on that another time). So after looking into this a little I completely missed the fact the web and Word documentation was updated.

The SDL blog http://blogs.msdn.com/sdl/archive/2009/05/28/a-note-on-the-recent-sdl-4-1-process-release.aspx highlighted this fact, and is really what pointed me to get the latest documentation. Below is an excerpt of the changes in the documentation:

Changes in This Version
Corrected typographical errors and added guidance regarding SDL security requirements and security recommendations. Additional requirements and recommendations for line-of-business (LOB) applications have been added.

  • Phase Two: Design
    • Three new security requirements
  • Phase Three: Implementation
    • Ten new security requirements
    • Twelve new security recommendations
  • Phase Four: Verification
    • Four new security requirements
    • Two new security recommendations
  • Phase Five: Release
    • One new security requirement
  • Security Development Lifecycle for Line-of-Business Applications

So for those out there definitely check out the SDL blog and if you are following SDL make sure you get the latest revision of the documentation. Next time I’ll make sure I that dont miss the crown jewels!

Gareth

Cloud platforms and C# – is Microsoft the only way? We have a savior…

Tuesday, May 26th, 2009

We seems to be in the midst of an undeclared ‘cloud’ arms race. Computing seems to be rapidly moving to the cloud concepts, the odd thing is how that various big players are aligning their strategies.

The clouds seem to fall into the following categories:

Outside of the Open provider I’m afraid that these are basically going to be our cloud choices. Purely based off the fact that the benefit of a cloud means that the cloud provider has to have a heck of a lot of processing infrastructure setup. Its really not a world where you can deliver your solution from your garage after from 2am hacking through the code base. We have moved from the inventive ‘anything goes’ era, to the commodity era. Even with VC backing it would be very hard to become a Open provider of cloud resources – I hope I’m wrong, but I dont believe any VC will stump up the vast amount of cash to get into the party this late into the game.

So what cloud offerings are available to us who use C# (CSharpee’s)? I dont see Google promoting C#, their languages of choice seem to be JavaScript and Python (although I see Java starting too wiggle in). So thats 2 out (Google and the Open provider).

I’m not sure I truly follow IBM’s cloud strategy at this time. Rather than providing the infrastructure they appear happy to provide the software to run within the Amazon cloud. So unless they are looking to provide some private cloud infrastructure they appear to be happy to just run within other companies clouds. If that is the case then for this part of the discussion as a cloud vendor they are out as well.

So that leaves us Microsoft and Amazon. Now things definitely get interesting, since Microsoft own the Microsoft platform they are probably (anyone hear anti-trust court hearing coming…) not ‘unofficially’ bound by the same pricing issues as Amazon using the Microsoft platform. Fundamentally Amazon charges 25% more to use a Microsoft platform over a Linux platform. So anyone looking to run a C# application must be reconsidering the language choice if they are hoping to need many servers running a successful software solution :-) , naturally Microsoft pricing should (and I say should as at the time of writing it hasn’t been released) be competitive.

Doom & Gloom? I don’t think so, if you love C# (like me) I don’t think its as bad as the picture above paints. The savior is something we have all heard about, but not necessarily thought about in this way. The Mono Project actually provides the answer to any cloud cost based dilemmas. For the longest time I knew about Mono, but couldn’t reconcile in my head the compelling reason (any reason actually :-) ) why I would ever have the need to use it. I work in a Microsoft shop, all our tools are Microsoft based (although that is changing with the ‘appliance’ concept) – why would I need my C# to run on anything other than a Microsoft platform? Now Clouds have brought in the compelling reasons – price and scalability.

I’m intentionally skipping past the fact that Azure is positioned to be more than the Amazon ‘virtualization’ cloud and very well beat it in price due to its different approach. However the thing Microsoft cant avoid is running on Linux is ‘on the surface’ cheaper, so any Azure pricing has to beat C# running on a Linux platform. Which really means that as long as Mono is viable you still have a hosting choice where you can run with the same, or hopefully better if Azure is what I think it will be, as the Linux hosted/clouded systems. Predominately because it can run on those systems :-) .

Mono is certainly interesting, and while it still needs some more hardening (see a upcoming post on Mono garbage collection) I imagine the Cloud race and Mono positioning will make them become the best of friends.

If you are thinking about putting some stuff up in a cloud and where waiting for Azure, perhaps you should have a look at Mono. You may be pleasantly surprised.

Gareth

Windows 2008 SP2 (and Vista SP2) Released

Tuesday, May 26th, 2009

Sorry for the slew of ‘boring’ blogs, but this one definitely has interest for those running Windows 2008. Unfortunately I actually know more people running Windows 2008 server than I do Vista! Here is the link:

http://technet.microsoft.com/en-us/windows/dd262148.aspx

The next couple of blogs will be more around cloud computing and the changing platforms concepts.

Gareth

SQL 2008 Books on line has been refreshed

Friday, May 22nd, 2009

The latest update to the Microsoft SQL Server 2008 Books Online (May 2009) has been released.

For those wanting the latest it was released yesterday,

Gareth