WatersWorks

By John K. Waters

View all blogs

NIST's New AI Security Controls: What Developers Need to Know

If you're building AI systems, NIST has just released a roadmap that will significantly impact how you architect, deploy, and maintain your models. The agency released a concept paper this week outlining Control Overlays for Securing AI Systems (COSAIS), essentially taking the federal government's existing cybersecurity playbook (SP 800-53) and adapting it for the unique challenges of AI development.

More

Posted on August 18, 20250 comments


A GPT-5 Reality Check: When AI Progress Meets Human Attachment

OpenAI dropped GPT-5 last week with the usual fanfare, and I've been diving into what it actually delivers versus what the marketing promises. Spoiler alert: it's complicated, and not always in the ways you'd expect.

What Actually Changed
GPT-5 is a solid incremental upgrade—emphasis on incremental. The numbers are real: 94.6% on math competitions, 74.9% on coding benchmarks, and significantly fewer hallucinations. These aren't revolutionary leaps, but they matter for anyone using these tools for real work.

More

Posted on August 13, 20250 comments


Java Developers Can Finally Build AI Apps Without Losing Their Minds

For decades, Java has been the enterprise world's go-to programming language—the reliable, if somewhat verbose, workhorse powering everything from banking systems to e-commerce platforms. But when the AI revolution hit, Java developers found themselves on the sidelines, watching Python programmers build chatbots and image generators with seemingly magical ease.

Now that's changing, thanks to an unlikely duo: Quarkus and LangChain4j.

More

Posted on August 5, 20250 comments


Java Audits Drive Surge in Software Licensing Costs

Software licensing compliance has become a costly burden for enterprises, with more than a quarter of organizations now spending over $500,000 annually to resolve licensing non-compliance issues, according to a joint survey by Java platform provider Azul and the ITAM Forum.

The survey of 500 IT asset management and software asset management professionals, conducted by Dimensional Research, reveals that Oracle Java has emerged as a particular pain point, with 73% of respondents reporting an Oracle Java audit within the past three years and nearly 80% planning to migrate to open-source alternatives.

More

Posted on July 23, 20250 comments


Java's Pragmatic Turn: Why 'Codeless Migration' Is Winning Over Cloud-Native Rewrites

The recent news that Payara and Azul have formed a strategic partnership to deliver "codeless migrations" represents more than just another vendor alliance. It's a glimpse into how the Java world is adapting to the cloud-native imperative while acknowledging a fundamental truth: most enterprises want to modernize without the pain of rewriting code.

More

Posted on July 16, 20250 comments


Java's Microservices Toolkit Gets a Quiet but Crucial Upgrade

The MicroProfile Working Group, the open forum that optimizes Enterprise Java for a microservice architecture, just released their latest iteration, MicroProfile 7.1. After ten months of development, they've refined two critical pieces of the Java microservices puzzle: telemetry and OpenAPI handling.

Here's the thing about enterprise Java—it's not sexy, but it's everywhere. Those banking apps processing your mortgage? That logistics software tracking your Amazon package? Chances are, there's Java humming away in the background, and increasingly, it's built on microservices architecture. MicroProfile is the connective tissue that makes it all work.

More

Posted on June 30, 20250 comments


Java at 30: A Language Still Going Strong

June 2025 marks the 30th anniversary of Java, the language that helped define modern enterprise computing. If you had told me in 1995 that devs would still be writing and shipping production code in this language three decades later... honestly, I would’ve raised an eyebrow.

Still, Java has had a remarkable lifespan, surviving shifts in architecture, paradigms, and ownership, while remaining deeply embedded in global infrastructure.

More

Posted on June 3, 20250 comments


Chromium’s Quiet AI Revolution: Google’s Web Stack Goes Agent-Ready

You might’ve missed it amid the spectacle of Gemini demos and AI ethics panels, but Google quietly rewired the front end of the web at its annual I/O conference—and it’s worth your attention. Not just because they streamlined carousels or snuck multimodal prompts into Chrome Canary. No, this is Google laying the groundwork for the next decade of web-native AI.

More

Posted on May 20, 20250 comments


From Model to Workflow: OpenAI Buys Windsurf to Own the Developer Stack

OpenAI is acquiring Windsurf—formerly known as Codeium—for about $3 billion. The deal, first reported by Bloomberg, marks OpenAI’s largest acquisition to date and places the maker of ChatGPT squarely in the heart of the code editor. For developers, this isn’t just news. It’s a direct shift in the tools and platforms that shape your daily workflow.

More

Posted on May 7, 20250 comments