Engineering notes from the Xari team
Practical notes from the engineers who build connected products, secure software and .NET business apps.
Connected products, electronics & firmware
Designing Safer BLE Pairing for Mobile and Embedded Products
BLE security is a product architecture decision, not just a firmware setting. Pairing, keys, mobile UX, and OTA all have to agree.
Building Reliable BLE Mobile Applications for Enterprise and Connected Products
Enterprise BLE apps fail in the field when connection state, pairing, permissions, diagnostics, and recovery are treated as afterthoughts.
Designing Reliable WiFi Provisioning for IoT Products
Reliable IoT provisioning must handle mobile OS restrictions, network edge cases, secure credential transfer, and clear recovery paths.
Wireless Attack Surfaces in Connected Products: Wi-Fi, Bluetooth, and RF
Wireless interfaces are often where connected products leave the controlled application boundary and meet the physical world.
Security
Securing AI Features Before They Become Production Risk
AI features introduce new risks around prompts, tools, data, models, APIs, and workflow automation. Xari helps teams secure AI-enabled applications pragmatically.
Turning the OWASP Top 10 Into Engineering Practice
The OWASP Top 10 is most useful when teams convert it into design reviews, reusable controls, tests, and engineering standards.
Where SAST, DAST, and IAST Belong in an Enterprise AppSec Program
A practical enterprise guide to using static, dynamic, and interactive application security testing without turning the delivery pipeline into noise.
When API Keys Leak: Hardcoded Secrets and Enterprise Blast Radius
Hardcoded secrets turn source code into an attack path. Xari helps teams detect exposed credentials, redesign secret handling, and build safer delivery pipelines.
Reducing npm and PyPI Supply Chain Risk in Enterprise Delivery
Open-source packages move fast, and attackers know it. Xari helps teams reduce dependency risk with scanning, review gates, provenance, and build controls.
Security Gates That Fit Real DevSecOps Pipelines
Security gates work when they are specific, automated, and tied to release risk. Xari helps teams add controls without turning delivery into theater.
Eliminating SQL Injection in Modern Enterprise Applications
SQL injection is preventable, but it still survives in legacy code, reporting features, dynamic search screens, and unsafe shortcuts around ORMs.
Databases
Why SQL Server Gets Slow: 10 Production Issues We Fix Most Often
SQL Server performance tuning should start with measurement, not guessing. The fastest fix is the one that addresses the real bottleneck.
Monitoring PostgreSQL and SQL Server Without Losing Engine-Specific Detail
Cross-engine monitoring should normalize service health while preserving SQL Server and PostgreSQL diagnostic detail where it matters.
A Practical Database Governance Model for Growing Enterprise Teams
Governance is the operating model that keeps data platforms secure, measurable, recoverable, and maintainable as systems grow.
.NET & XAF
DevExpress XtraReport: A Useful and Necessary Tool
In an era marked by a huge progress achieved in both data visualizations and analytics, the software world navigates through continuous creations which essentially aim
Migrating from Crystal Reports to DevExpress Reports: A Smarter Reporting Future
Executive Summary Organizations seeking to modernize their reporting infrastructure often face the challenge of migrating from legacy reporting tools like Crystal Reports to more contemporary
.NET Conf 2021: Host, Deploy and Scale ASP.NET Core Blazor Server
Enterprise notes from a .NET Conf 2021 session on hosting, deploying, and scaling ASP.NET Core Blazor Server applications.
NET Conf 2021 offers a bright future
The .NET Conf 2021 conference showed the new developments achieved in the .NET framework while opening the path for the exploration of new work environments,
Xari attends DEVintersection
The DEVintersection conference will be held this week in Las Vegas, Nevada, and our company Xari will attend the event, aiming at positioning the firm
Xari – XAF Training Tour
Xari DevExpress XAF Training World Tour in progress! (4 Months In Already ?) We’re thrilled to finally materialize our Training World Tour. This has been
More from Jose Columbie on XAF and .NET at xafmarin.com.
