Literate programming is now a reality through nbdev and the new visual debugger for Jupyter. — Notebooks have always been a tool for incremental development of software ideas. Data scientists use Jupyter to journal their work, explore and experiment with novel algorithms, quickly sketch new approaches and immediately observe the outcomes. However, when the time is ripe, software developers turn to classical IDEs (Integrated Development Environment)…

Turn your Windows machine into a developer workstation with WSL 2. — I used to have an Apple laptop as my daily driver. I could do almost everything there; development, proposal writing, music composition etc. …

Software is like entropy: It is difficult to grasp, weighs nothing, and obeys the Second Law of Thermodynamics; i.e., it always increases.— Norman Augustine — Planning out the Machine Learning (ML) project lifecycle is an effective way to organize the decisions and actions that produce a successful outcome. This framework allows you to focus on what is important to get the system up and running and minimize surprises.

How do you know that the Docker image you pulled from Docker Hub is safe to use? — Only a tiny fraction of public images are verified and vetted on Docker Hub. In general, there are three types of images pushed on Docker Hub: Verified: Verified images are high-quality images from verified publishers. The Docker team has analyzed those images for security flaws. Official: This is a curated…

It takes 20 years to build a reputation and few minutes of cyber-incident to ruin it. — Stephane Nappo — Unfortunately, Kubernetes deployments are not safe by default. A notorious example is the cryptojacking attack launched against Tesla Motors. A few years ago, malicious attackers infiltrated their Kubernetes cluster and started a crypto mining process from within one of the pods. Each Kubernetes distribution is different; thus, there is no…

If computer viruses should count as life, we’ve created life in our own image. — You have just finished the implementation of your new shiny tool, and you’re ready to package it in a Docker container and push it to a public repository for others to find. How would you do it? Well, if your mind says to execute the docker push command you’re wrong! …

Information is the oxygen of the modern age. It seeps through the walls topped by barbed wire, it wafts across the electrified borders. — Ronald Reagan — In previous articles, we revised the most fundamental security concepts, introduced STRIDE, and examined the attack surface of both Docker and Kubernetes. What You Love to Ignore in Your Data Science Projects The only truly secure system is one that is powered off, cast in a block of concrete, and sealed in a lead-lined room…towardsdatascience.com

If someone else can run arbitrary code on your computer, it’s not your computer anymore — Rich Kulawiec — Kubernetes has been a buzzword in the infrastructure world for a few years now. Besides being a Greek word to describe someone in command, Kubernetes is one of the most successful and rapidly growing open-source projects. It is arguably the most popular container orchestrator engine, implementing the operator pattern.

What could go wrong? — In the first story of these security articles, we assumed that you are building your next Data Science project, and it’s time to release it to the world. We said that your release is not some tiny Python library; it’s a full-fledged MLOps project, where many microservices run and communicate…