What security teams need to understand about developers

What security teams need to understand about developers

NightVision offers web and API security testing tools built to integrate with developers’ established workflows. NightVision identifies issues by precise area(s) of code, so devs don’t have to chase down and validate vulnerability reports, a process that eats up precious engineering resources. Get started with their docs.

Connect with Kinnaird on LinkedIn.

Stack Overflow user Cecil Curry earned a Populist badge with their exceptionally thoughtful answer to In Python how can one tell if a module comes from a C extension?.

Some great excerpts from this episode:

“From the program side, I would say if you're running a security program or you're starting from day one, there's a danger with security people and being the security person who's out of touch or doesn't know what the life of a developer is like. And you don't want to be that person. And that's not how you have actual business impact, right? So you got to embed with teams, threat model, and then do some preventative security testing, right? Testing things before it gets into production, not just relying on having a bug bounty program.”

“With code scanning, you're looking for potentially insecure patterns in the code, but with dynamic testing, you're actually testing the live application. So we're sending HTTP traffic to the application, sending malicious payloads in forms or in query parameters, et cetera, to try to elicit a response or to send something to an attacker controlled server. And so using this, we're able to. Not just have theoretical vulnerabilities, but exploitable vulnerabilities. I mean, how many times have you looked at something in GitHub security alerts and thought, yeah, that's not real. That's not exploitable. Right. So we're trying to avoid that and have higher quality touch points with developers. So when they look at something, they say, okay, that's exploitable. You showed me how. And you traced it back to code.”

See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

Avsnitt(862)

Solving the data doom loop

Solving the data doom loop

Hasura is a GraphQL API platform. Get started exploring here.Read Ken’s article on the data doom loop.Find Ken on LinkedIn. Shoutout to Stack Overflow user liquorvicar, who earned a Lifeboat badge with an exemplary answer to Checking value in an array inside one SQL query with WHERE clause.See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

14 Feb 29min

A distributed database that can withstand a meteor strike

A distributed database that can withstand a meteor strike

OceanBase is an open-source distributed database. Check it out on GitHub.For more information, follow OceanBase on LinkedIn, X, and YouTube.To connect with Charlie Yang, find him on LinkedIn.Got questions about OceanBase? Join the discussion here on Stack Overflow.See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

12 Feb 22min

“In the short term, more chaos”: What’s next for API design

“In the short term, more chaos”: What’s next for API design

Speakeasy builds API tooling for developers.Find Sagar on LinkedIn. Kudos to Stack Overflow user Bergi, who earned a Lifeboat badge with an exemplary answer to What is the Universal Module Definition (UMD)?.See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

11 Feb 28min

Why build your own vector DB? To process 25,000 images per second

Why build your own vector DB? To process 25,000 images per second

Verkada is a cloud-based video security company. Back in the innocent days of 2021, we spoke with a company that makes smart dashcams. See how far video and image processing has come. Congrats to Reg for earning a Lifeboat badge for their answer on What is the difference between JSP and Spring?See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

7 Feb 35min

Will the web ever be the primary delivery system for 3D games?

Will the web ever be the primary delivery system for 3D games?

Tres.js is an open-source 3D engine for Vue built on Three.js. Find Jaime on LinkedIn or GitHub or explore his creative lab.Push is a browser-based identity security platform that detects and blocks identity attacks, enforces security controls, and monitors employee logins to cloud accounts.Shoutout to Stack Overflow user zwol, who earned a Lifeboat badge with an excellent answer to How would you write the equivalent of this C++ loop in Rust.See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

4 Feb 22min

Feature flags: Theory meets reality

Feature flags: Theory meets reality

Schematic offers SDKs for packaging, pricing, and entitlements. Check out Ben’s article on feature flags. Listen to Bill Tarr from AWS and Brian Rinaldi (then at LaunchDarkly and now at Localstack) talk about the opportunity to extend feature flags beyond deployment and rollout and into entitlement management and monetization.Find Fynn on LinkedIn.Find Ben on LinkedIn.feature flags, software development, technical debt, business strategy, product management, feature management, DevOps, software engineering, pricing models, entitlementsSee Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

31 Jan 33min

“Countries are coming online tomorrow, whole countries”

“Countries are coming online tomorrow, whole countries”

ClickUp is a work and chat platform designed to streamline workflows and make people more productive.You can find RJ on LinkedIn or explore his posts on the ClickUp blog.Shoutout to Stack Overflow user Hemant Singh, who helped the community understand pause vs stop in docker.See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

28 Jan 35min

How the internet changed in 2024

How the internet changed in 2024

Check out Cloudflare’s 2024 Year in Review.Read John’s posts on the Cloudflare blog or connect with him on LinkedIn. Shoutout to user Timo Kähkönen for providing knowledge-seekers with a cheap algorithm to find measure of angle between vectors.See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

24 Jan 32min

Populärt inom Business & ekonomi

framgangspodden
varvet
badfluence
uppgang-och-fall
svd-ledarredaktionen
rss-borsens-finest
avanzapodden
lastbilspodden
rss-kort-lang-analyspodden-fran-di
fill-or-kill
rss-dagen-med-di
rikatillsammans-om-privatekonomi-rikedom-i-livet
affarsvarlden
borsmorgon
tabberaset
dynastin
kapitalet-en-podd-om-ekonomi
borslunch-2
aktiepodden
rss-veckans-trade