Two AI-assisted PRs can look the same: clean diff, passing tests, green CI. But one came from inquiry. The engineer built the mental model. The other came from delegation. The agent made the problem disappear. victoronsoftware.com/posts/compre... #AI #SoftwareEngineering

Comprehension debt: the hidden cost of AI-generated code

AI coding agents can ship working code before the team has built the mental model to maintain it. That gap is comprehension debt.

victoronsoftware.com

AI coding agents can ship working code faster than teams can build the mental model to maintain it. That gap is comprehension debt. The risk isn’t AI writing code. The risk is merging code no human can explain. Article: victoronsoftware.com/posts/compre... #AI #SoftwareEngineering

Comprehension debt: the hidden cost of AI-generated code

AI coding agents can ship working code before the team has built the mental model to maintain it. That gap is comprehension debt.

victoronsoftware.com

At @fleetdm.bsky.social, we’re rolling out ACME-based attestation for Apple hosts, so this talk comes from real product work. My NDC Security talk is now up: www.youtube.com/watch?v=4oDB... #ApplicationSecurity #ZeroTrust #MDM

How to Know Your Client Is Real: Hardware-Backed Authentication Patterns - Victor Lyuboslavsky

This talk was recorded at NDC Security in Oslo, Norway. #ndcsecurity #ndcconferences #security #developer #softwaredeveloper Attend the next NDC conference near you:…

youtube.com

ICYMI. Our guide on HTTP Message Signatures (RFC 9421) is here: www.youtube.com/watch?v=6Qxk... #APIsecurity #WebSecurity #MessageSignatures #SoftwareEngineering

HTTP message signatures demystified: Stronger API security

Full article: https://victoronsoftware.com/posts/http-message-signatures/ APIs power modern software, yet many still depend on weak security methods like API keys or bearer tokens. While simple,…

youtube.com

Tried to build a modular monolith. Three compromises later, the "modular" part disappeared. 🫠 Turns out team buy-in isn't enough. You need governance and an architect who doesn't walk away. First attempt. Lessons learned. www.youtube.com/watch?v=lrM3... #SoftwareArchitecture #TechnicalDebt

The modular monolith that wasn't

Our first attempt at modularizing a 500K-line codebase taught us more about team dynamics than architecture Full article: https://victoronsoftware.com/posts/modular-monolith-attempt/

youtube.com

HTTP Message Signatures (RFC 9421) are becoming a real standard. They solve problems that API keys, JWTs, and mTLS alone cannot. Full guide: victoronsoftware.com/posts/http-m... #APIsecurity #WebSecurity #MessageSignatures #SoftwareEngineering

Understanding HTTP message signatures: A developer's guide

Master HTTP message signatures for API security. Learn the RFC 9421 standard, see real implementations from industry leaders, and get practical Node.js code examples

victoronsoftware.com

🏗️ Tried to turn a 500K-line monolith into a modular monolith. Three compromises later, the code seeped back into legacy. First attempt. Won't be the last. victoronsoftware.com/posts/modula... #SoftwareArchitecture #TechnicalDebt #LessonsLearned

The modular monolith that wasn't

Our first attempt at modularizing a 500K-line codebase taught us more about team dynamics than architecture

victoronsoftware.com

Why great software developers draw 🧠✏️ At #AIMHDC2025 I shared 4 diagrams every dev should know: 🧩 Sequence 🔄 Flowchart 🏗️ Class 🗃️ ERD Because seeing the shape of your idea can be the difference between being heard & being understood. 🎥 youtu.be/ATGrRb9gCHo #SoftwareDesign #DiagramsAsCode #FleetDM

Why great developers draw: 4 architecture diagrams that clarify everything

The best developers don't just write code; they also draw. Whether you're building features, debugging systems, or explaining ideas to teammates, great architecture diagrams can make the difference…

youtu.be

I gave this talk at Heartland Developers Conference 2025 last week: 🎤 Will AI coding agents replace software developers? 👉 www.youtube.com/watch?v=z0r3... AI isn’t replacing developers overnight. It’s changing what it means to be one. #AI #Developers #SDLC #Engineering #AIMHDC2025

Will AI coding agents replace software developers?

AI code completion is yesterday's news. Today's rise of AI coding agents, which are tools that autonomously generate, test, and even refactor code, raises a critical question: Will engineers become…

youtube.com

🎤 Spoke at #CYC25 last week on something I care deeply about: Radical Transparency: Leading Engineering With Openness. 📺 Watch here: www.youtube.com/watch?v=5IZq... When priorities are unclear, engineers stall. I shared how we’re tackling this at @fleetdm.bsky.social + what you can do, too.

Victor Lyuboslavsky - Radical Transparency: Leading Engineering With Openness #CYC25

The Commit Your Code Conference is a tech conference that donates 100% of all ticket sales to charity. Every speaker covers their own travel and accommodations to come down to Dallas just to support…

youtube.com

🤖 Can AI agents really make multitasking more productive, or is it just a trap? We broke it down in this video: when to single-task, when to multitask, and how to keep your agents on track. 📺 Watch here 👉 youtu.be/HSDrhYvE3g0 #AI #AgenticAI #DeveloperExperience

Multitasking with AI agents: When it works and when it fails

A guide to balancing focus and efficiency when working with AI agents, including tips on single-tasking vs multitasking Full article:…

youtu.be

Still one of my biggest lessons in engineering leadership: Without transparency, even the best teams drift. Make priorities visible. Make blockers public. Everything else gets easier. 📺 www.youtube.com/watch?v=3oSd... #Engineering #Leadership #Transparency

Why transparency beats everything else in engineering

A personal story of how organizational dysfunction nearly broke me, and how transparency transformed everything. Learn why visibility matters more than process, meetings, or roadmaps. Full article:…

youtube.com

Still debugging with guesswork? OpenTelemetry gives you full visibility. Even in dev. 🛠️ Why developers should use OpenTelemetry in dev www.youtube.com/watch?v=1a8f... Trace. Debug. Ship with confidence. #OpenTelemetry #DevTools #Observability #Tracing #DevEx

Why developers should use OpenTelemetry in dev

Learn how using OpenTelemetry during development improves observability and prepares your app for production success Full article: https://victoronsoftware.com/posts/opentelemetry-for-devs/ TODO app…

youtube.com

🤖 Multitasking with AI agents: boost or distraction? AI can code, debug & research in parallel, but should you? 🧠 When it works ⚡ When it fails ✅ How to stay efficient Read more 👉 victoronsoftware.com/posts/multit... #AI #DeveloperExperience #AgenticAI

Multitasking with AI agents: When it works and when it fails

A guide to balancing focus and efficiency when working with AI agents, including tips on single-tasking vs multitasking

victoronsoftware.com

💡 Engineering without transparency = driving in fog. Once priorities went public, decisions sped up, trust grew, and work actually shipped. victoronsoftware.com/posts/engine... #Engineering #Leadership #Transparency

Why transparency beats everything else in engineering

A personal story of how organizational dysfunction nearly broke me, and how transparency transformed everything. Learn why visibility matters more than process, meetings, or roadmaps.

victoronsoftware.com

🤖 AI agents aren't replacing developers, but they are changing how we work. A few weeks ago we broke down their real impact across the SDLC. Missed it? 📺 Watch the video: www.youtube.com/watch?v=fdBx... #AI #SoftwareEngineering #AIAgents #DevTools #LLMs

We used to think OpenTelemetry was just for prod. Turns out, it’s a dev tool too. 🛠️ Why developers should use OpenTelemetry in dev: → victoronsoftware.com/posts/opente... See how we: ✅ Trace API calls ✅ Debug SQL ✅ Correlate logs ✅ Catch errors early #OpenTelemetry #DevTools #Observability

Why developers should use OpenTelemetry in dev

Learn how using OpenTelemetry during development improves observability and prepares your app for production success

victoronsoftware.com

🔐 Still thinking about mTLS vs HTTP Message Signatures? Breakdown + video: ✅ How they work ⚖️ Tradeoffs 📊 Comparison table ⚠️ Replay attacks, TLS termination, more 📺 Video: www.youtube.com/watch?v=aDMd... #CyberSecurity #ZeroTrust #mTLS #SysAdmin

🎥 Missed the TPM deep dive? We made a video walkthrough. 🔐 Key hierarchies 🔐 Parent/child keys 🔐 Signing with Go + tpm2-tools ▶️ youtu.be/zwnznp5KeQs 📖 victoronsoftware.com/posts/how-to... #TPM #CyberSecurity #DeviceSecurity #Golang #SecureKeyStorage

Will AI agents replace software developers? 🤖 Not anytime soon. They’re great at 💻 implementation & 🧪 testing but not in other areas. Even full code automation = only 43% productivity gain. Full breakdown 👉 victoronsoftware.com/posts/will-a... #AI #AIAgents #DevTools #SoftwareEngineering #LLMs

Will AI agents replace software developers?

A realistic look at how AI coding agents are reshaping software development and what engineers need to do to stay ahead

victoronsoftware.com

🔐 mTLS vs HTTP Message Signatures: which should you use? We break down the tradeoffs for device enrollment & secure APIs. ✅ How they work ⚖️ Pros & cons 📊 Comparison table 🆕 Why RFC 9421 matters 👉 victoronsoftware.com/posts/mtls-v... #CyberSecurity #mTLS #ZeroTrust #SysAdmin #EndpointSecurity

mTLS vs HTTP signature faceoff: securing your APIs

How mTLS and HTTP signatures work, where they fit best, and how to choose the right one for your architecture

victoronsoftware.com

At #OSSummit 2025, I shared how radical transparency shapes how we build at @fleetdm.bsky.social — from open-sourcing internal docs to scaling trust across teams. 🎥 Full talk now up: www.youtube.com/watch?v=xfj_... #OpenSource #EngineeringCulture #PublicByDefault #Transparency #Leadership

🔐 At @fleetdm.bsky.social, we’re taking endpoint security to the next level. Just dropped a deep-dive on using TPM 2.0 for hardware-backed key storage — with real-world Go + tpm2-tools examples. 🧵👇 victoronsoftware.com/posts/how-to... #CyberSecurity #DeviceSecurity #Golang #SoftwareDevelopment

How to use TPM 2.0 to secure private keys

A practical guide to generating, storing, and using private keys with hardware-backed protection

victoronsoftware.com

Missed my first conference talk recap? Top lessons: ✅ Prep is key ✅ Growth happens outside your comfort zone ✅ Best convos happen off stage 🔗 Article: victoronsoftware.com/posts/first-... ▶️ Video: www.youtube.com/watch?v=IaY9... #DevDaysEurope #PublicSpeaking #TechCommunity

My first conference talk experience

From nerves to exhilaration: honest reflections on a first-time conference talkFull article: https://victoronsoftware.com/posts/first-conference-talk/

youtube.com

🎤 Just gave my first public keynote at #DevDaysEurope on "Readable Code"! Covered what readability really means, why it matters, metrics, AI’s impact, and practical ways to improve codebases. Watch here: www.youtube.com/watch?v=lQBY... #SoftwareEngineering #DeveloperExperience

Victor Lyuboslavsky: Readable Code: The Secret to Clean, Productive Software

Session name: Readable Code: The Secret to Clean, Productive SoftwareSpeaker: Victor LyuboslavskySession description: Unreadable code is a silent killer of s...

youtube.com

🎉 Excited to speak at Open Source Summit North America 2025 on June 23 and represent @fleetdm.bsky.social! Radical Transparency: Lessons from Open-Sourcing Nearly All Company Documentation 🔗 ossna2025.sched.com/event/1zfgo/... #OSSummit #LinuxFoundation

Open Source Summit North America 2025: Radical Transparency: Lessons From Open-...

View more about this event at Open Source Summit North America 2025

ossna2025.sched.com

🧭 A few weeks ago, we shared how we built a free, full-featured engineering metrics dashboard. Since then, we started using it at @fleetdm.bsky.social to spot patterns in how our team collaborates 💪 🎥 www.youtube.com/watch?v=okYO... 👉 victoronsoftware.com/posts/engine... #Metrics #DevEx

Full-featured engineering metrics—for free

Use GitHub, Grafana, SQL, and free-tier infrastructure to power your engineering benchmarksFull article: https://victoronsoftware.com/posts/engineering-metri...

youtube.com

🎤 Just gave my first conference talk at #DevDaysEurope—overseas, on a movie theater stage, in front of ~300 engineers. Nerves, jet lag, and adrenaline were real, but so was the “speaker’s high.” 🔗 Read: victoronsoftware.com/posts/first-... #PublicSpeaking #TechCommunity #ConferenceSpeaker

My first conference talk experience

From nerves to exhilaration: honest reflections on a first-time conference talk

victoronsoftware.com

Track engineering metrics with real power—for free 💥 ✅ GitHub Actions ✅ BigQuery ✅ Grafana We built a dashboard with moving averages, filters, & drill-down links—all on free-tier tools. 👉 victoronsoftware.com/posts/engine... #EngineeringManagement #Metrics #SoftwareDevelopment

Full-featured engineering metrics—for free

Use GitHub, Grafana, SQL, and free-tier infrastructure to power your engineering benchmarks

victoronsoftware.com

🧠 What if your AI agent could learn to use your product, like a real teammate? We taught an AI agent to use @fleetdm.bsky.social API—no commands, just natural language—using MCP. Lessons learned, mistakes made. Full story here 👇 victoronsoftware.com/posts/introd... #AgenticAI #MCP #AI #DevTools

Introducing MCP: Lessons from building an AI-driven server

How we taught an AI agent to use our product with MCP

victoronsoftware.com