Christian Wenz: ASP .NET Core Security - Episode 233

Christian Wenz: ASP .NET Core Security - Episode 233

Christian Wenz works as a consultant, trainer, and author with a focus on web technologies and is the author or co-author of over 100 computer books. He regularly contributes to various IT magazines and speaks at conferences around the globe. Christian holds a "Diplom" (the German equivalent of a master's degree) in Computer Sciences, and one in Business Informatics. In his day job, he is one of the founders of the web agency Arrabiata Solutions (http://www.arrabiata.com/) with offices in Munich, Germany, and in London, UK. He also frequently works with development teams to make their applications better performing, more secure, and more reliable.

Topics of Discussion:

[2:51] Has Christian really written over 100 computer books? Christian talks about the books and the high points of technology that he has worked in.

[7:16] What is the OWASP (Open Web Application Security Project) Top 10 list?

[10:33] You always have to be aware that something may go wrong, and have a security mindset.

[12:05] Again and again, make sure that you understand the fundamentals of web app security, because eventually, you will make a mistake in your code.

[12:30] What is insecure design?

[13:43] Christian talks about the enumeration scheme CWE: common weakness enumeration, which basically assigns a number to each risk or attack.

[17:00] How should people be logging into their web sessions now with .NET7?

[18:31] The major mistake you can make these days is to write your own authentication mechanism.

[23:57] What is Christian's favorite mechanism today for securing HTTP web services?

[31:05] What are some of the tools Christian always reaches for, and how do we differentiate between static auditing and dynamically auditing an application?

Mentioned in this Episode:

Clear Measure Way

Architect Forum

Software Engineer Forum

Programming with Palermo — New Video Podcast! Email us programming@palermo.network

Clear Measure, Inc. (Sponsor)

.NET DevOps for Azure: A Developer's Guide to DevOps Architecture the Right Way, by Jeffrey Palermo — Available on Amazon!

Jeffrey Palermo's Twitter — Follow to stay informed about future events!

Architect Tips — Video podcast!

Azure DevOps

Christian Microsoft Profile

ASP.NET Core Security

Christian's Books on Amazon

OWASP

Identity Server

Dependabot

Security Code Scan

Configuring Code Scanning for a Repository

Want to Learn More?

Visit AzureDevOps.Show for show notes and additional episodes.

Jaksot(385)

Buck Hodges on the introduction to Azure DevOps Services - Episode 001

Buck Hodges on the introduction to Azure DevOps Services - Episode 001

Welcome to the first edition of The Azure DevOps Podcast! Your host, Jeffrey Palermo is joined by guest, Buck Hodges, to announce the global release of Azure DevOps Services. Buck is the Director of Engineering for the Azure DevOps product group and has been at Microsoft for over 15 years. Azure DevOps Services (previously known as Visual Studio Team Services) aims to help developers ship faster. With Azure DevOps Services comes a full set of services that you can use separately, with other non-Microsoft services, or together as a suite. In this episode, Jeffrey and Buck dive into all the key differences that come along with the rebranding and new services. Buck also gives a rundown of the system (from how it's organized to how to mix and match with other devops tools on the market) and many of the new, exciting features available for developers. Episode Sponsor: Clear Measure is a software engineering firm and Microsoft Gold Partner empowering development teams to be their best. Clear Measure equips developers with the devops tools, methods, and automation necessary to focus on building their applications rather than wrestling with builds, deployments, or environments. Click clear-measure.com to see whether a devops implementation is right for you. Topics of Discussion: [:30] About today's topic and guest. [1:00] Buck Hodges announces the new Azure DevOps Services. [2:44] Buck's background in DevOps and career progression at Microsoft. [10:00] Key differences with the rebranding to Azure DevOps, and its 5 main services: Pipelines, Boards, Artifacts, Repose, and Test Plans. [14:49] Can Jira (and other similar softwares) users adopt Azure DevOps? [16:48] About Microsoft's commitment to open source and giving back by offering free use of Azure DevOps to run free builds for open source projects. [20:02] About the ease of getting started with Azure Pipelines through the GitHub Marketplace, and some of the big users with Pipelines. [20:49] A word from Azure DevOps sponsor: Clear Measure. [21:19] About the internal transformation of the Azure DevOps team and what it looks like today. [24:04] How many developers are part of Buck's organization? [24:54] Buck gives a rundown of the system (how it's organized, how many team projects, how many Git repositories, how many independent services, etc.) [28:58] Do they build all the services together in the same Git repository or do they split them into different build configurations? [32:45] What's coming next for Azure DevOps? [36:34] Buck addresses some general misconceptions. [40:00] When will customers be able to get their hands on the new Azure DevOps 2019 server? [41:30] Where to learn more or get started with Azure DevOps. Mentioned in this Episode: Azure DevOps VSTS Azure Pipelines Azure Boards Azure Artifacts Azure Repose Azure Test Plans Team Foundation Server (TFS) Jira GitHub Visual Studio Code TypeScript Dev.Azure.com Want to Learn More? Visit AzureDevOps.Show for show notes and additional episodes Follow Up with Our Guest: Posts by Buck Hodges on Microsoft Azure Buck Hodges' LinkedIn

7 Syys 201843min

Suosittua kategoriassa Politiikka ja uutiset

tervo-halme
aikalisa
rss-ootsa-kuullut-tasta
ootsa-kuullut-tasta-2
politiikan-puskaradio
viisupodi
otetaan-yhdet
et-sa-noin-voi-sanoo-esittaa
rss-asiastudio
io-techin-tekniikkapodcast
rikosmyytit
rss-podme-livebox
the-ulkopolitist
rss-raha-talous-ja-politiikka
rss-vaalirankkurit-podcast
rss-tasta-on-kyse-ivan-puopolo-verkkouutiset
rss-tekkipodi
linda-maria
radio-antro
rss-kuka-mina-olen