.NET Rocks!

Jeremy Miller is back with more open-source goodness in the form of the Wolverine .NET Command and Message Bus. Jeremy talks about developing the Marten database and reaching a point with event sourcing that led to Wolverine - building the infrastructure to work with a variety of queuing solutions to act as an intermediary, a message bus, and a command bus, as needed. The conversation also digs into the current state of open-source with his projects, and the evolution toward more sustainable open-source development - there is more to come!

Why should you have high-level design in your applications? Carl and Richard chat with Billy Hollis about the concepts around high-level design and how it can help make better software. Billy talks about how high-level design addresses more than UX concerns, expanding into architecture and business workflow to think more deeply about how we use software. And of course, Billy digs into various applications we all use (looking at you, Teams!) and talks about how high-level design could help deal with the challenges around those kinds of applications. Is it needed everywhere? No - but more is needed!

How do you secure your existing applications from the security exploits out there today? Carl and Richard talk to Joylynn Kirui about the challenges developers face in making secure applications. Joylynn talks about understanding the threat landscape and staying up to date on the CVEs that can represent a zero-day vulnerability to your application. There are a ton of tools to help make you aware of the potential risks, check out all the links in the show notes. And check out Joylynn's webinar on shifting application security left at https://aka.ms/DevSecOpsDNR

Why should .NET developers build Power Apps? Carl and Richard talk to April Dunnam about the latest in Microsoft's Power Platform and why .NET developers should get involved. April talks about the fusion development methodology, where domain experts use the Power Platform tools alongside .NET developers using Visual Studio to build line-of-business apps. There are many opportunities in the cycle of building Power Apps where your skills as a .NET developer can make the process go faster, more reliable, and with more features! Also, check out April's upcoming workshops on building Power Apps online at https://aka.ms/PowerDNR and at the DevIntersection conference in Las Vegas in December!

Are your APIs vulnerable to hacking? Carl and Richard talk to Dana Epp about how APIs have become the focus of black hats today. Dana talks about tooling you can use to look at your APIs the same way the hackers do, and find potential exploit paths for impersonating users, stealing data, and otherwise exploiting your system. There's an OWASP list specifically for API security - spend some time with it!

How do we make open source work for everyone? While at NDC in Oslo, Carl and Richard talked to David Whitney about his experiences working on open-source projects, and the challenges of making them sustainable. David talks about how many projects start with an individual making something for themselves, which then evolves into many people utilizing the project, but not contributing to it. And when companies depend on that software, the pressure on the creators gets serious - but without compensation. How do we make open source better? And how do the tech giants make the situation better or worse?

What can observability do for you? While at NDC in Oslo, Carl and Richard chatted with Alayshia Knighten about her work with honeycomb and helping people understand what's happening with their applications in production. Alayshia talks about instrumenting applications to provide insight into behavior in real-time - by leveraging existing tools to provide data and reporting. The conversation digs into how sysadmins and developers see applications differently, and how standard telemetry systems make it easier for everyone to be on the same page!

Ready for a story of cloud scaling from the trenches? While at NDC Oslo, Carl and Richard talked with Meg Gotshall about her experiences scaling the Fotoware service with her team. Meg talks about the limits of auto-scaling, where all the services are scaled up, but the bottlenecks exist in only one place - and how dashboards help to provide more visibility into the problem. But even when you sense the problem, how do you fix it? The conversation digs into breaking services into their containers and AppService plans so they can be scaled independently - initially for diagnostics but ultimately for production!

How do you test your web applications? Carl and Richard talk to Debbie O'Brien about Playwright, Microsoft's new open-source web application testing tool. Playwright lets you build tests in an array of languages, platforms, and browsers. Debbie talks about how you can build atomic tests that will survive new versions, and test independently of other features. And when tests fail, Playwright generates a PWA of the test run showing exactly where the test fails!

GitHub Copilot is here! Are we all going to lose our jobs? While at NDC in Oslo, Carl and Richard talked to Michelle Mannering about how Copilot helps you write code - emphasis on help! Michelle explains that Copilot is able to take your explanations of what code needs to be written to find examples of that code for you to take advantage of. It's still up to you to break down the problem well enough, but you spend less time fussing with syntax. This is especially powerful when calling into unfamiliar APIs or coding in languages you have less experience with. The conversation dives into how the developer ecosystem continues to evolve with these new tools, so that we can do more faster!

What can AWS do for you? Carl and Richard talk to Isaac Levin about the experience of being a .NET developer working with Amazon Web Services. Isaac talks about the broader strategy of moving applications to the cloud and what Amazon offers to make your life easier, with various migration and validation tools that can help you understand how an existing application will behave on cloud services. The goal is to get beyond the virtual machine and into containers, serverless, and more!

How do you make applications that work well for the visually impaired? Carl and Richard talk to Courtney Heitman about building applications that the visually impaired can use. Courtney talks about different kinds of visual impairment including field of view, color blindness, low and no vision. There are tools to help you understand what those impairments are like and to help you test how your app will work for everyone. Then the conversation turns to screen readers - which are challenging to test with because it does take quite a bit of experience to use. There are powerful solutions, you just need to incorporate these accessibility features - sooner, rather than later!

How much do you need to know about design? While at CodePaLOUsa in Louisville, Carl and Richard talked to Kathryn Grayson Nanz about understanding application designers. Kathryn talks about knowing just enough about design to understand that, like software development, it is an iterative process, that takes user feedback and incorporates it into future designs. Oh, and we know why your custom icon sucks!

How do you test Angular forms? While at CodePaLOUsa in Louisville, Carl and Richard talked to Martine Dowden about her approach to building tests that are maintainable, and are best automated because they are tedious to test manually - like forms validation. Martine talks about a mix of automated unit testing and eyes-on manual smoke tests being the most efficient way to have a well-tested web application.

What's wrong with microservices? Carl and Richard talk to Shawn Wildermuth about his rant about microservices. Shawn talks about the intent of microservices in the first place, to try and break down the giant service balls of goo that get built over time. But is it necessary? The conversation explores the optimization problem, where having services together is efficient right up until it isn't - when you have a service that changes more often than others or needs to scale more. Only then does it make sense to carve it out. Lots of fun conversation!

Twenty years ago, before the word podcast existed, there was .NET Rocks! While at CodePaLOUsa in Louisville, Carl and Richard celebrated the publication of the first episode of .NET Rocks twenty years ago in August 2002. Doc Norton joined the conversation to talk about how agile has evolved and the challenges of making good software today. And a big thanks to all the listeners of the show - we couldn't have done it without you!Support this podcast at — https://redcircle.com/net-rocks/donations

How does Power Platform fit into your application lifecycle management? Carl and Richard talk to Kartik Kanakasabesan about his work on Power Platform to treat it like every other development approach. Kartik talks about how PowerApps create straightforward forms-over-data solutions that work well on phones, tablets, and PCs. The conversation digs into how developers in the C# and Visual Studio space can work with Power Platform developers, including building back-end services, creating front-end components, and working with existing source code and deployment pipelines. The result is what Kartik calls fusion development, where everyone works together to build solutions effectively!Support this podcast at — https://redcircle.com/net-rocks/donations

When and why should you change your development career? Carl and Richard talk to Rocky Lhotka about his recent change from a large development firm to a one-man band. Rocky talks about changes in Magenic that helped him make the move he'd been thinking about for years. This leads to a broader conversation about how careers evolve, whether or not you become a manager, and what it takes to be out on your own. There are many ways to have a career - what works best for you?Support this podcast at — https://redcircle.com/net-rocks/donations

How do you make it easier for developers to build apps in Azure? Carl and Richard talk to Scott Hunter about his new role focused on developer tooling for Azure. This means much more than .NET - Scott talks about tooling for Java, Android, Node, and more! The conversation ranges over how Azure can simplify development cycles, debugging, and monitoring in production, no matter what stack you're using. Scott also digs into Azure Container Apps, announced at Build 2022, making it easier to get started using containers for your applications, but not limiting how you use containers in the future!Support this podcast at — https://redcircle.com/net-rocks/donations

Can you make your application passwordless? While at NDC London, Carl and Richard talk to Eli Holderness about implementing passwordless technology. Eli talks about using password managers and adding physical authentication tokens like fido keys. The conversation then digs into all the varieties of passwordless authentication including SMS, Authenticators, and one-time tokens. There are great libraries for implementing all of these technologies - and you're going to need more than one!Support this podcast at — https://redcircle.com/net-rocks/donations

What features do you want to see in C# 11? Carl and Richard chat with Kathleen Dollard about the work being done to the latest version of C# so far. But first - what about VB.NET? Starting with a question from a listener, Kathleen clarifies Microsoft plans for VB.NET - it's never going away! Then into the feature list of C# 11, including new generic math, static interfaces, initialization features, pattern matching, and more!Support this podcast at — https://redcircle.com/net-rocks/donations

How do you measure how secure your application is? While at NDC London, Carl and Richard chatted with Victoria Almazova about her work around measuring DevSecOps. Victoria talks about making security part of the DevOps cycle, which is part of every build and measured constantly. The conversation moves to traditional penetration testing and the challenges of incorporating security improvements into applications. But what if your security efforts shifted to the left and became part of your development practice? Then there would be fewer fixes to make!Support this podcast at — https://redcircle.com/net-rocks/donations

WebAssembly is awesome - what else can you do with it? While at NDC London, Carl and Richard talked to Steve Sanderson about his work with WebAssembly, including Blazor. Steve talks about how WebAssembly continues to evolve adding WebAssembly System Integration. This opens the door to the idea that code in the WebAssembly can be run anywhere - any operating system, any language, using whatever compute is available. That gives an option to run code on the client, the server, and anywhere in between!Support this podcast at — https://redcircle.com/net-rocks/donations

Episode 1800! While at NDC London, Carl and Richard were on stage for a live show with Heather Downing, discussing the modern developer career. The pandemic created considerable changes in work, and developers were also affected. Do you have the job you want? How do you change it? With some questions from the online viewers, Heather talks about taking control of your career and turning it into the life you want - and celebrating 1800 episodes of .NET Rocks!Support this podcast at — https://redcircle.com/net-rocks/donations

What is WebRTC, and why do you want to use it? While at NDC London, Carl and Richard talk to Liz Moy about WebRTC, the open-source library that is used by many of your favorite video chat applications. Liz talks about taking advantage of the hard work already done to control video and audio devices through the browser, as well as the various strategies for actually connecting to other people through firewalls and NAT routers. The conversation also explores where and when you would want to have integrated video, audio, screensharing, and data transfer capabilities.Support this podcast at — https://redcircle.com/net-rocks/donations

June is GitHub Maintainer Month - have you hugged an open-source project maintainer lately? Carl and Richard talk to Martin Woodward and Immo Landwerth about what it's like to be a maintainer of open-source projects. Often an open-source project starts as something you want for yourself and choose to share - and then others start to use your project and life gets more complicated. The conversation dives into what its like for a full-time employee to contribute to a project maintained by someone working part-time on it, the challenges around licensing, and how the open-source community continues to evolve - hopefully for the better!Support this podcast at — https://redcircle.com/net-rocks/donations

How well does gRPC work with .NET? Carl and Richard talk to Irina Scurtu about her work with gRPC in .NET. Irina talks about the new features added in .NET 6 to support gRPC including client-side load balancing, fault tolerance, and improved performance. The conversation digs into the various uses of gRPC - Irina advocates for inter-microservice calls, but you can make gRPC work for a browser using gRPC Web. High performance and flexible - what more could you want?Support this podcast at — https://redcircle.com/net-rocks/donations

How do you find a great video clip after the fact? Carl and Richard talk to Jeff Fritz about his work building KlipTok, a tool for making Twitch video clips more discoverable and shareable. Jeff digs into the tricky bits of KlipTok, which is all about fast indexing and searching to get to the right clip. The conversation digs into various data storage techniques and using the cloud in a way that doesn't break the bank. Jeff may be a Microsoft employee, but that doesn't mean he uses only Microsoft tools for his projects!Support this podcast at — https://redcircle.com/net-rocks/donations

How do you modernize a .NET application? While at NDC Porto, Carl and Richard talked to Mark Rendle about his work on Visual Recode, a tool for migrating WCF apps to gRPC, and dug into the broader story of what a modern .NET application looks like. Mark talks about why you would bother to modernize at all - because the standard framework isn't going anywhere. But if you want to take advantage of the latest features of .NET and the performance available to you with .NET 6 and the cloud, modernization is the way to go!Support this podcast at — https://redcircle.com/net-rocks/donations

What can web components do for you? Carl and Richard talk to Jemima Abu about her work with web components. Jemima talks about the projects she is currently working on, and how UI web components make it easier to build good-looking front ends quickly. The discussion digs into how web components stay agnostic of different web frameworks - although often there are solutions within the framework for many component problems. If you're a fan of vanilla JavaScript, web components can be a big boost to development, but its up to you to do the right things with them!Support this podcast at — https://redcircle.com/net-rocks/donations

How do you know your open source is secure? Carl and Richard talk to Jillian Ratliff about security practices on your own code, and the open-source code you depend on. Jillian talks about some of the high-profile security problems that have happened recently in the open-source world including log4j. The conversation turns to practices for making your applications secure with open-source including security testing as part of your CI/CD pipeline, periodic penetration testing, and more!Support this podcast at — https://redcircle.com/net-rocks/donations

How are extensions in Visual Studio changing? Carl and Richard talk to the extension master himself, Mads Kristensen. With over 150 extensions in the Marketplace, Mads has a lot of experience building tooling that can streamline your Studio experience. The conversation digs into why an extension makes sense rather than being built into Studio. Although in the case of the Markdown Editor, that does happen! Mads also as the VSIX Community space if you want to get into building your extensions, with libraries and tooling to guide you to the pit of success with your extension project. Check it out!Support this podcast at — https://redcircle.com/net-rocks/donations

When should you pivot your startup? Carl and Richard talk to Phil Haack about his experiences with Abbot - the chatbot designed to work within Slack. Phil talks about starting with Abbot focused on ChatOps, where Abbot would help with automation around the deployment of applications. And while there were some customers, it wasn't enough. The pivot was to customer support that also depends on tools like Slack. The conversation digs into focusing on understanding where customers have challenges and learning to solve them, rather than trying to offer a platform for everything!Support this podcast at — https://redcircle.com/net-rocks/donations

How do you do Infrastructure-as-Code? Carl and Richard talk to Chris Klug about his experiences with different IaC approaches. Christ talks about using HashiCorp's Terraform - one of the original IaC solutions, with a huge number of providers to work with all sorts of platforms - but do they keep up with the latest? Microsoft has released Bicep as a domain-specific language over Azure Resource Manager, but of course, it's only for Azure. And then there's Pulumi, letting you create IaC in C# - as always, there's no one right way, but there is a path to nirvana out there somewhere, you just have to find it!Support this podcast at — https://redcircle.com/net-rocks/donations

How do you make web apps into desktop apps? Carl and Richard talk to Otto Dobretsberger about Photino, a fork from Steve Sanderson's WebWindow project that will compile your web application into a cross-platform desktop application for Windows, macOS, and Linux. Otto talks about keeping Photino extremely lightweight, many times smaller than other desktop framework approaches. The typical approach is using the SPA of your choice - Angular, Vue, or React, and then compiling it into the desktop form. Great for making reliable off-line applications and onto dedicated kiosk-style hardware!Support this podcast at — https://redcircle.com/net-rocks/donations

How do you debug asynchronous code? Carl and Richard talk to Isadora Rodopoulos about her debugging asynchronous code series of videos and the tools available today to help with debugging. Different people approach debugging in different ways - there's no one way to solve any given problem. But Isadora digs into the critical challenges of asynchronous code, not being sure of the order of execution, managing when messages get lost and detecting the transient problems that come from async code!Support this podcast at — https://redcircle.com/net-rocks/donations

What's an Azure Static Web App, and why do you want one? Carl and Richard talk to Stacy Cashmore about Azure Static Web Apps, Microsoft's implementation of static web apps. Stacy talks about the bare essentials of making a web page - serving up some HTML. How much back-end processing do you really need? The static web app approach serves a page as a static file - and while that file may make calls to APIs, it doesn't require AppService itself. The result is fast, low-cost web apps!Support this podcast at — https://redcircle.com/net-rocks/donations

Are you moving apps to the cloud? Carl and Richard talk to Richard Reukema about his experience shifting workloads into the cloud. Richard talks about getting beyond virtual machines in the cloud and utilizing the platform services that allow your application to scale up and out. The conversation dives into designing software independent of the implementation, even the cloud provider! This separation between design and implementation, combined with modern practices of deployment and testing automation, get to the true value of the cloud - the ability to rapidly iterate to respond to business needs!Support this podcast at — https://redcircle.com/net-rocks/donations

How do you build cross-platform UI? Carl and Richard talk to Dan Walmsley about Avalonia, a lightweight, cross-platform UI using XAML and C#. Dan talks about supporting an array of Linux GUIs, Windows, macOS, WebAssembly, Raspberry PI, iOS, and Android! Avalonia comes from the Linux and Mono world and now runs with .NET 6 - you should check it out!Support this podcast at — https://redcircle.com/net-rocks/donations

Flutter comes to Windows! Carl and Richard talk to Chris Sells about the latest incarnation of Flutter which now has desktop support for Windows. Flutter has been around for a few years helping to build mobile apps in iOS and Android with a unified codebase. But now it also supports deployment as a web app, and as a Windows app, and soon, MacOS and Linux. Chris talks about how Flutter provides for hardware abstraction that has allowed the ecosystem to support even more platforms, and build libraries to take Flutter in all sorts of directions.Support this podcast at — https://redcircle.com/net-rocks/donations

Visual Studio turns 25! Carl and Richard talk to Julia Liuson, who has been working on Visual Studio since the beginning about her experiences building and leading the product. Julia talks about how Visual Studio got started, its evolution into .NET, with some great stories along the way. There's also Studio for the Mac and Visual Studio Code to talk about as well - all with different origin stories!Support this podcast at — https://redcircle.com/net-rocks/donations

Another in the series of twenty years of .NET, this one with Scott Guthrie! Carl and Richard talk to Scott about the early days of ASP.NET, the recruiting of the ninja army of Scott Hanselman, Rob Conery, Phil Haack (and others), and much more! Scott has been part of .NET from the beginning and talks about bringing the ASP.NET web team with him when he joined the Azure group. The conversation digs into how to keep a 20-year-old product relevant, which does mean an occasional reinvention!Support this podcast at — https://redcircle.com/net-rocks/donations

.NET is twenty years old - how has it changed? Carl and Richard talk with Mark Miller about how he moved from Delphi to .NET, and how .NET has continued to be relevant through the years. The conversation also digs into those pivotal moments of .NET and how it shaped the product into the open-source, cross-platform product of today!Support this podcast at — https://redcircle.com/net-rocks/donations

C# is twenty years old! Carl and Richard chat with Anders Hejlsberg about how C# has evolved, and how it's continuing into the future. Anders digs into the origins of C# as the C-like Object-Oriented Langage aka COOL that he proposed when Microsoft could no longer build its own version of Java. The conversation gets into how all programming languages 'build on the shoulders of giants' and use features of languages past, with their own twists and innovations. Fun conversation with the father of C# !Support this podcast at — https://redcircle.com/net-rocks/donations

Twenty years of .NET! Carl and Richard talk to Miguel de Icaza about his experiences working with .NET, going all the way back to 2001 with the announcement of the Mono Project. Miguel talks about those early days of Mono, creating MonoTouch to make C# run on iOS, Xamarin, and more! The conversation also dives into the evolution of open source, and the impact that tech companies have on open source projects, and what the future might hold for open source maintainers.Support this podcast at — https://redcircle.com/net-rocks/donations

How do you build microservices? Carl and Richard talk to the authors of Pro Microservices in .NET 6 - Sean Whitesell, Rob Richardson, and Matthew Groves. The conversation digs into how microservices have evolved, the role of containers, and how the different tools that go together to make a successful microservices architecture. Then there's a whole discussion on reliability, security, scalability, and testing - there are a lot of things that go into making professional microservices!Support this podcast at — https://redcircle.com/net-rocks/donations

What's your UX strategy? Carl and Richard talk to Brian Lagunas about his work on Prism, the UX framework that works WPF, Xamarin, and now the Uno Platform to build good-looking, consistent UX experiences. Brian talks about the challenges around simplifying the UX experience enough to make it easy to do the right thing, while still having enough functionality to not limit what your applications can do. The conversation also dives into web UX challenges and some of the tools that Brian has been working on for Infragistics in the same space.Support this podcast at — https://redcircle.com/net-rocks/donations

What's the right development stack for a startup? Carl and Richard talk to Oleg Fridman about his latest startup called Verb Data and the challenges of building a startup with the .NET stack. Oleg talks about how the investors, and sometimes the developers, have concerns around .NET - but not the customers. .NET is well known for being enterprise-class and scalable - but it's not as well known for being cross-platform, open-source, and cloud friendly. The conversation dives into where .NET makes sense in a project and where it does not and the differences in developing in a startup versus a more established business. Not everyone is suited for startup life, but startup life has also evolved - maybe you're ready to try it!Support this podcast at — https://redcircle.com/net-rocks/donations

Geek Out Number Three - Energy! Richard chats with Carl about the state of power generation in the world today - the growth of wind (offshore wind is growing!) and solar, why geothermal isn't taking off, and then a long conversation about small modular nuclear power. Is SMR really going to be a thing? 2021 also had a lot of news around fusion - much of it just noise, but there have been some important developments that might actually mean fusion is getting closer! The energy Geek Out wraps up with power storage, including thermal storage, different types of battery storage, even the potential of hydrogen! Lots to geek out about!Support this podcast at — https://redcircle.com/net-rocks/donations

Ready to migrate from ASP.NET Web Forms? Carl and Richard talk to Veli Pehlivanov about his work helping organizations modernize their ASP.NET Web Forms applications. Veli talks about finding an appropriate migration strategy for the application, often keeping the existing app in operation while modernization efforts happen piece by piece. The challenging part in that scenario is aspects like security - can you share authentication from the older app with the newer? Sometimes it's necessary to build shims to keep things in sync, and while they seem temporary, often they are run for many years. Migration isn't easy, but the alternatives are worse - plan to take the time!Support this podcast at — https://redcircle.com/net-rocks/donations