Matt Riley, one of our Sr. Engineers at Amkor has just released his first open source project, dubbed the Deployment Server. It's a ColdFusion application (Mach-II 1.5, ColdSpring, EXT 2.0, Java SE 6, Ant 1.7.0, SVN, SQL Server) that's designed to make deploying applications to various server environments simple, auditable, and secure.

We have a very rigorous SDLC at Amkor, and an even more rigorous internal and external audit. As part of that, it's important that we have a clear segregation of duties between developers, QA, approvers, and those that can promote code. In order to make our lives easier, Matt's created an application that provides a security layer around SVN and ANT that allows our operations group (or anyone else defined in the security policies) to specify which builds/tags are to be deployed, and to which server(s).

The application is highly configurable, but because of that, it's not just something you can download and run out of the box - it has to be customized/configured to meet the needs of your particular environment and process. For more information, or to download, check it out on the RIAForge website.

Any and all feedback is welcome.

First it was a letter from DSW, then my mortgage company Wells Fargo. Today, it's the Department of Veteran's Affairs (I served 9 years in the Air National Guard). That's three times that my personal information has been stolen in the past two years. The only real line of "defense" here is for me to request copies of my credit report on an annual basis, and review them to make suer there isn't anything on there that shouldn't be. It's a real hassle to do, and it shouldn't be MY responsibility.

I'm getting real tired of all the apologies and excuses from the corporations and businesses that are responsible for my identity information. It's a two part problem as I see it. The first is data security, and there need to be consequences for businesses who lose people's personal information when appropriate security measures were not in place to insure data privacy and security. I realize that many businesses take reasonable steps to prevent data loss and disclosure, but there are also plenty that do not.

The second problem has to do with credit reporting. I think it's great that Congress passed a law that requires free access to your credit information once a year, but that's not enough. I think it should be the responsibility of the credit reporting agencies to send me a copy of my credit report on an annual basis. There is absolutely no responsibility on their part right now to ensure fair and accurate information on credit reports. If you've ever tried to have a mistake on your credit report corrected, you know what I mean. Heck, if the Social Security Administration can send me an annual copy of my Social Security account status, I don't see any reason the major credit reporting agencies can't do something similar.

I apologize for my ranting here, but I'm fed up!




Copyright 1995-2010 Rob Brooks-Bilson. All rights reserved.
Aura skin for Raymond Camden's BlogCFC inspired by Joe Rinehart & Steven Erat. This blog is running version 5.9.004.