What security teams need to understand about developers

What security teams need to understand about developers

NightVision offers web and API security testing tools built to integrate with developers’ established workflows. NightVision identifies issues by precise area(s) of code, so devs don’t have to chase down and validate vulnerability reports, a process that eats up precious engineering resources. Get started with their docs.

Connect with Kinnaird on LinkedIn.

Stack Overflow user Cecil Curry earned a Populist badge with their exceptionally thoughtful answer to In Python how can one tell if a module comes from a C extension?.

Some great excerpts from this episode:

“From the program side, I would say if you're running a security program or you're starting from day one, there's a danger with security people and being the security person who's out of touch or doesn't know what the life of a developer is like. And you don't want to be that person. And that's not how you have actual business impact, right? So you got to embed with teams, threat model, and then do some preventative security testing, right? Testing things before it gets into production, not just relying on having a bug bounty program.”

“With code scanning, you're looking for potentially insecure patterns in the code, but with dynamic testing, you're actually testing the live application. So we're sending HTTP traffic to the application, sending malicious payloads in forms or in query parameters, et cetera, to try to elicit a response or to send something to an attacker controlled server. And so using this, we're able to. Not just have theoretical vulnerabilities, but exploitable vulnerabilities. I mean, how many times have you looked at something in GitHub security alerts and thought, yeah, that's not real. That's not exploitable. Right. So we're trying to avoid that and have higher quality touch points with developers. So when they look at something, they say, okay, that's exploitable. You showed me how. And you traced it back to code.”

See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

Avsnitt(860)

You’ve got 99 problems but data shouldn’t be one

You’ve got 99 problems but data shouldn’t be one

Tobiko Data is creating a new standard in data transformation with their Cloud and SQL integrations. You can keep up with their work by joining their Slack community.Connect with Toby on LinkedIn.Connect with Iaroslav on LinkedIn.Congrats to Stellar Answer badge winner Christian C. Salvadó, whose answer to What's a quick way to comment/uncomment lines in Vim? was saved by over 100 users.See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

27 Juni 29min

You've vibe coded an app. Now what?

You've vibe coded an app. Now what?

SPONSORED BY HEROKUHeroku is a platform-as-a-service (PaaS) for deploying, scaling, and managing apps. Connect with Vish on X and LinkedIn. Congrats to Populist badge winner AmaDaden  for their answer to How to generate a legend with colors in PlantUML?.See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

25 Juni 26min

How to build your prototypes without a 35% tariff

How to build your prototypes without a 35% tariff

Ryan and Ben welcome Alex Malcoci, CEO and founder of MiniProto, to talk innovations in hardware prototyping, the evolving complexities of the global supply chain, the impact of the US-China trade war on manufacturing, and how automation in production could lead to new training programs for future engineers.Episode notes:MiniProto is a US-based prototyping manufacturer revolutionizing the way we develop and interact with hardware. Connect with Alex on LinkedIn.Shoutout to an Unsung Hero of Stack Overflow, Hamed Jimoh, who deserves upvotes for their more than 10 accepted answers with a zero score.See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

24 Juni 22min

Defending the realm: Trust and safety at Stack Overflow

Defending the realm: Trust and safety at Stack Overflow

The Trust and Safety team is using aliases in this episode. Learn more about who the Community Management team is at Stack Overflow. Explore how we keep our community safe in our Code of Conduct. Congratulations to Lifeboat badge recipient Arvin Yorro, who won it for their helpful answer to the question Docker Desktop - WSL update failed.See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

20 Juni 37min

"My job is going to change in a dramatic way”: Exploring the future of the internet with Cloudflare

"My job is going to change in a dramatic way”: Exploring the future of the internet with Cloudflare

Dane shares his excitement about the Model Context Protocol (MCP), exploring its potential impact on the future of technology. The discussion turns to the growing need for sustainable content monetization and fair compensation for creators in an AI-driven world, and how this connects to Cloudflare’s mission to build a better internet.The conversation also: Explores how Cloudflare leverages AI internally to enhance developer productivity and improve code quality while keeping developers as owners of their work. Covers Cloudflare’s innovative organizational structure and their journey toward becoming an AI-first company. Episode notes: Connect with Dane on LinkedIn or X, and learn more about Cloudflare. Read more about Knowledge Solutions, a data licensing offering that provides continuous access to Stack Overflow’s public dataset. Learn more about creating a private instance of Stack Overflow for your team or org with Stack Overflow for Teams. See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

19 Juni 23min

After 30 years, Java is still brewing up new features

After 30 years, Java is still brewing up new features

Connect with Georges on LinkedIn and see his work on inside.java.Listen to our previous episode with Georges, a celebration of Java’s 25th anniversary. Today we’re shouting out the age-old question What is a NullPointerException, and how do I fix it?, which was answered 31 times as a community effort.See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

17 Juni 27min

“We’re not worried about compute anymore”: The future of AI models

“We’re not worried about compute anymore”: The future of AI models

Together AI is a platform for building with open-source and specialized multimodal models. Check out their docs.Connect with Jamie on LinkedIn.Shoutout to user aryaxt who earned a Stellar Question badge by wondering about MySQL Data - Best way to implement paging?.See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

13 Juni 25min

Better vibes and vibe coding with Gemini 2.5

Better vibes and vibe coding with Gemini 2.5

Gemini 2.5 is DeepMind’s most advanced model yet, with strong reasoning and coding capabilities. Connect with Tulsee on LinkedIn.Connect with Logan on LinkedIn and Stack Overflow. Check out our previous episode with Logan, we discussed his unique path from coding to AI to product, the challenges of non-determinism in AI models, and surprising lessons from working at the Apple Store.Congrats to Populous badge winner Pascal MARTIN for answering the question PHP echo vs PHP short echo tags.See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

10 Juni 33min

Populärt inom Business & ekonomi

framgangspodden
varvet
badfluence
rss-borsens-finest
uppgang-och-fall
svd-ledarredaktionen
avanzapodden
lastbilspodden
rikatillsammans-om-privatekonomi-rikedom-i-livet
fill-or-kill
rss-kort-lang-analyspodden-fran-di
rss-dagen-med-di
affarsvarlden
borsmorgon
dynastin
tabberaset
kapitalet-en-podd-om-ekonomi
montrosepodden
rss-inga-dumma-fragor-om-pengar
market-makers