Guy Podjarny on OSS Security, Serverless, and the Equifax Hack

Guy Podjarny on OSS Security, Serverless, and the Equifax Hack

In this podcast, Wes talks to Guy Podjarny (Founder/CEO Synk). The two discuss the space between open source software and third-party dependencies, including a discussion of the Equifax hack (and what we can learn from it), the role of serverless architectures today (and what it means to application surface area), and then finally they wrap with security hygiene best practices with OSS and serverless. Why listen to this podcast: - The majority of security vulnerabilities that exist in applications today comes from vulnerable third-party libraries, rather than the application’s own code. - An application shouldn’t permit total leak of all data because of a single vulnerability - defence in depth is important. - Equifax couldn’t have failed more spectacularly in the way they handled it. - The Equifax hack serves as a wake-up call to pay attention to vulnerabilities in dependencies. - If your build system breaks the build when a dependency vulnerability is found automatically, it will be applied sooner. More on this: Quick scan our curated show notes on InfoQ http://bit.ly/2ziAIat You can also subscribe to the InfoQ newsletter to receive weekly updates on the hottest topics from professional software development. bit.ly/24x3IVq Subscribe: www.youtube.com/infoq Like InfoQ on Facebook: bit.ly/2jmlyG8 Follow on Twitter: twitter.com/InfoQ Follow on LinkedIn: www.linkedin.com/company/infoq Want to see extented shownotes? Check the landing page on InfoQ: http://bit.ly/2ziAIat

Denne episoden er hentet fra en åpen RSS-feed og er ikke publisert av Podme. Den kan derfor inneholde annonser.

Episoder(396)

AI, ML, and Data Engineering InfoQ Trends Report 2026

AI, ML, and Data Engineering InfoQ Trends Report 2026

In this episode of the podcast, members of the InfoQ AI and MIL editorial staff and friends of InfoQ discuss the current trends in the domain of AI, ML and Data Engineering. One of the regular featur...

30 Okt 1h 11min

The Future of Web Apps: Will AI Agents Generate UIs on the Fly?

The Future of Web Apps: Will AI Agents Generate UIs on the Fly?

Rachel Lee Nabors, former React core team member, dives into the architecture and philosophy behind local-first applications, exploring how small language models (SLMs) running directly on-device can ...

19 Okt 47min

What Does It Really Mean To Program With AI: A Conversation with Joy Ebertz

What Does It Really Mean To Program With AI: A Conversation with Joy Ebertz

In this podcast, Michael Stiefel spoke to Joy Ebertz about how the use of artificial intelligence is changing the way architects and developers do their jobs. Focusing on the long term success of the ...

12 Okt 44min

Future Cybersecurity: Hardware Memory Safety, Automated Governance and Post-Quantum Cryptography

Future Cybersecurity: Hardware Memory Safety, Automated Governance and Post-Quantum Cryptography

In this episode, Chris Swan, engineer at Atsign and security track host at QCon London, reflects on the ideas shared during QCon London 2026 and teases topics of the future edition. The discussion exp...

5 Okt 34min

The AI Revolution Fails Without Psychological Safety For Developers: A Conversation with Erin Doyle

The AI Revolution Fails Without Psychological Safety For Developers: A Conversation with Erin Doyle

In this podcast, Michael Stiefel spoke to Erin Doyle about how artificial intelligence tools are transforming the software development process, and how they are affecting software engineers. Architect...

28 Sep 54min

The Future of AI: From Enterprise Adoption to Open Source Sovereignty

The Future of AI: From Enterprise Adoption to Open Source Sovereignty

In this episode, a panel of AI experts, Meryem Arik (DoubleWord), Clara Higuera Cabañes (BBVA), and Jeff Smith (C Proof), demystify the current state of AI in the enterprise. The discussion navigates ...

25 Sep 52min

Securing AI Agents: Identity, Authorisation, and the DPACT Framework

Securing AI Agents: Identity, Authorisation, and the DPACT Framework

In this episode, Sahil Agarwal talks about the critical challenges of identity, authorisation, and security in the age of AI agents. Sahil introduces the DPACT framework (Delegation, Policy, Auditabil...

21 Sep 41min

How Will We Train Developers If AI Does the Routine Work: A Conversation with Scott Hanselman

How Will We Train Developers If AI Does the Routine Work: A Conversation with Scott Hanselman

In this podcast Michael Stiefel spoke to Scott Hanselman about developing new software engineers when artificial intelligence agents are doing most of the work on which junior developers were trained....

14 Sep 36min

Populært innen Teknologi

teknisk-sett
energi-og-klima
rss-kunstig-intelligens-med-elisabeth-maren-og-morten
pedagogisk-intelligens
rss-ai-forklart
shifter
elektropodden
fornybaren
lydartikler-fra-aftenposten
rss-snakk-om-sikkerhet
nasjonal-sikkerhetsmyndighet-nsm
tomprat-med-gunnar-tjomlid
rss-alt-som-gar-pa-strom
rss-larervarelset
rss-digitaliseringspodden
smart-forklart
rss-teknologioptimistene-en-podkast-om-teknologi-og-mennesker
rss-fish-ships
rss-ki-praten
rss-heis