Recording date: May 25, 2021
Download at Apple Podcasts, Google Podcasts, Spotify, iHeartRadio, Spreaker or wherever you get your podcasts.
After intros we ask Eoin about the International Conference on Technical Debt, which recently had its 4th annual event. Eoin was a keynote speaker at the first conference, and has stayed involved since.
Eoin goes on to explain that the academic community have found ways to collect data on tech debt that have evaded many practitioners, which has brought fresh insights onto the problems and how they might be addressed.
Nick asks about the Preventing Technical Debt by Technical Debt Aware Project Management paper from Hamburg and whether “can it be this easy?”; and Eoin replies that in the SEI book on Managing Technical Debt, “it’s one of the key practices”.
After a spot of collective JIRA bashing, Nick asks Eoin about the Security Debt: Characteristics, Product Life-Cycle Integrations and Items paper, describing it as “fully buzzword compliant, talking about shift left and everything like that”. Eoin observes that security related tech debt gets special treatment, “it’s rather more urgent to fix, because you may not understand all the possible implications of it”. He goes on to say that security has become more popular as a topic at conferences over the last 10 years or so.
Chris asks Eoin for one of his favourite examples of tech debt from the past, which leads to a description of an old Unix transaction processing monitor, and a giant C/C++ code base that grew around it. He talks about a colleague making good progress, but the sense that they weren’t actually winning.
Eoin then talks a little about lessons from his book Continuous Architecture in Practice, and goes on to describe how people often get stuck on a data model that’s not quite working.
Chris then asks Eoin about practices he’s currently using to handle tech debt, which leads to “It very much depends on the environment, I think the key thing that we try and encourage everyone to do is to make sure that you’re running enough analysis on your code regularly, that you can spot trends and changes.”
We conclude with a promise to link to Eoin’s book on Software Systems Architecture that he co-authored with Nick Rozanski, so there it is.

Eoin Woods is CTO at Endava, where he guides technical strategy, oversees capability development and directs investment in emerging technologies. Eoin is co-author of two software architecture books (Software Systems Architecture and Continuous Architecture in Practice) and is a regular conference speaker, with a particular interest in software architecture, DevOps and computer security. He has created and suffered more technical debt over the years than he likes to admit.

Chris Swan is an Engineer at Atsign, building the Atsign Platform, an open source networking platform that is putting people in control of their data and removing the frictions and surveillance associated with today’s Internet.
He was previously a Fellow at DXC Technology where he held various CTO roles. Before that he held CTO and Director of R&D roles at Cohesive Networks, UBS, Capital SCF and Credit Suisse, where he worked on app servers, compute grids, security, mobile, cloud, networking and containers.
Chris is an InfoQ Editor writing about cloud, DevOps and security, and is a Dart Google Developer Expert (GDE). He’s a frequent speaking on supply chain security (SBOMs, SLSA and OpenSSF Scorecards), the Dart programming language and AI.

Nick Selby is the founder and Managing Partner of EPSD, with a career spanning technology leadership, not-for-profit leadership, law enforcement, and cybersecurity. He serves on the board of directors of the National Child Protection Task Force, and the advisory board of Sightline Security.
He has held key executive roles at Evertas, Trail of Bits, 451 Research (now S&P Global Intelligence), and Paxos Trust. He served as Director of Cyber Intelligence and Investigations at the NYPD, and as both paid and reserve Texas police detective specializing in investigations of child sexual abuse material and online investigations.
He is co-author of several books, including Cyber Attack Survival Manual, Blackhatonomics: An Inside Look at the Economics of Cybercrime, and In Context: Understanding Police Killings of Unarmed Civilians; he was technical editor of Investigating Internet Crimes: An Introduction to Solving Crimes in Cyberspace.