The Development Of Security With David Mytton

The Secure Developer

Player FM - Internet Radio Done Right

59 subscribers

הוסף לפני eight שנים

תוכן מסופק על ידי Snyk. כל תוכן הפודקאסטים כולל פרקים, גרפיקה ותיאורי פודקאסטים מועלים ומסופקים ישירות על ידי Snyk או שותף פלטפורמת הפודקאסט שלהם. אם אתה מאמין שמישהו משתמש ביצירה שלך המוגנת בזכויות יוצרים ללא רשותך, אתה יכול לעקוב אחר התהליך המתואר כאן https://he.player.fm/legal.

Netflix Sports Club Podcast

1
Paul Finebaum's 2025 Natty Pick & Diego Pavia's Heisman Hopes🏆 35:51

לפני 15 ימים35:51

הפעל מאוחר יותר

רשימות

לייק

אהבתי

35:51

Diego Pavia and Paul Finebaum are this week’s Netflix Sports Club guests. Paul Finebaum, the voice of the SEC, drops a bold national championship prediction that might give the Big Tenners pause, and he reveals which SEC quarterback has him starstruck. Vanderbilt quarterback, Diego Pavia, gives a standout performance on and off the field in SEC Football: Any Given Saturday. He relives that improbable ‘Bama victory, including pre-game routine and why he thinks this victory changed the conversation about Vandy football - sorry Nick Saban. Paul Fineman and Diego Pavia gaze into the crystal ball of the 2025 season, and what do they see? Heisman Trophies, making Auburn pay, and LSU’s chances for glory. In this interview, Vandy QB, Diego Pavia: 🟥 Details the 2024 Vandy vs. ‘Bama Buildup 🟥 Discusses playing for Coach Lea and with his bestie 🟥 Reveals his true height In this interview, SEC Expert, Paul Finebaum answers: 🟥 Why the SEC’s staying power is unrivaled? 🟥 Who’s almost a bigger star than Taylor Swift? 🟥 Which team will win the 2025 National Championship? 00:00 Intro 01:24 Vandy QB Diego Pavia Is a Star 01:37 Beating Bama 03:19 Choosing Vandy And Coach Lea 04:58 Give Me The Ball 06:20 Dude Put In The Work 07:38 Nick Saban Said What?? 08:20 Underdogs 10:22 Watch Out Auburn 12:33 Recruits: Come To Vandy! 13:29 Kay and Dani Talk SEC 15:54 Paul Finebaum’s SEC Picks 16:40 All About Arch Manning 17:23 SEC: The Only Game In Town 18:25 South Carolina Should Be In The Playoffs 19:40 Shane Beamer Bounce Back? 20:14 Arch Manning Is No Taylor Swift 21:42 The Weight of Being a Manning 22:31 Finebaum: “Best Player Since Tim Tebow” 23:20 LSU QB1 + Championship Or Bust 25:39 Post Saban Alabama 27:42 Is Vanderbilt Legit? 28:44 Can Mississippi State Survive? 29:49 The Vols “Will Struggle This Year” 31:44 SEC: Natty. Little Tenners: Nothing 33:09 Outro 34:28 Up Next - America’s Team: The Gambler And His Cowboys 🏈 Diego Pavia Instagram - https://bit.ly/45uLND4 TikTok - http://bit.ly/4fsLY5p X - https://bit.ly/4ldwx2j 🏈 Vanderbilt Instagram - http://bit.ly/4lfo8eu X - http://bit.ly/4mCiaWt YouTube - @vucommodores 🏈 Paul Finebaum Instagram - https://bit.ly/45kVtPv X - https://bit.ly/46JQFWc 🎙️ Kay Adams Instagram - http://bit.ly/3GYp4Go TikTok - http://bit.ly/4m7KmR9 X - http://bit.ly/45nI2Ou 🎙️ Dani Klupenger Instagram - https://bit.ly/3HeGGxx TikTok - https://bit.ly/4lQSBkl X - https://bit.ly/4lWpufr 🟥 Netflix Sports Instagram - http://bit.ly/45CPAhL TikTok - http://bit.ly/4mti6Ia X - http://bit.ly/4mseqGH Facebook - http://bit.ly/45o5xqK YouTube - @NetflixSports We want to hear from you! Leave us a voice message at www.speakpipe.com/NetflixSportsClub Be sure to watch, listen, and subscribe to the Netflix Sports Club Podcast on YouTube, Spotify, Tudum, and wherever you get your podcasts. Hosted by Kay Adams, the Netflix Sports Club Podcast is an all-access deep dive into the Netflix Sports Universe. Join Kay as she speaks with athletes, coaches, and top sports correspondents to break down the latest Netflix Sports series. Expect bold opinions, insightful analysis, and candid conversations you won’t find anywhere else.…

לפני שנה 34:23

MP3•בית הפרקים

Episode Summary

In this episode of The Secure Developer, host Danny Allan sits down with David Mytton, founder and CEO of Arcjet, former CEO of Server Density, and co-founder of Console.dev. David shares his insights into bridging the “developer-security gap” with Arcjet, a cutting-edge middleware SDK designed to empower developers with advanced security tools like rate limiting and bot protection. The conversation dives into the evolution of developer tools, the growing role of AI in coding, and the future of secure software development in modern environments. David also offers a fascinating perspective on sustainable computing and the impact of clean energy in the tech industry.

Show Notes

In this thought-provoking episode of The Secure Developer, host Danny Allan sits down with David Mytton, founder and CEO of Arcjet, to explore the evolving intersection of development, security, and AI. David, a serial entrepreneur with deep roots in cloud monitoring and developer tools, shares his journey from co-founding Server Density to building Arcjet, a groundbreaking solution for developers managing runtime security.

The conversation begins with David’s take on why developers should prioritize security early in the development lifecycle. He highlights the challenges developers face in modern environments, where traditional security tools often fail to integrate seamlessly with serverless and edge computing platforms. David introduces Arcjet as an innovative SDK that empowers developers to implement rate-limiting, bot detection, and other security measures directly in their applications, offering a developer-first approach to runtime protection.

Delving deeper, the discussion shifts to the rise of WebAssembly as a transformative technology. David explains how WebAssembly enables near-native performance across platforms while providing unparalleled isolation—making it a perfect fit for modern security needs. He contrasts this with traditional intrusion detection systems and outlines how Arcjet leverages WebAssembly to fill the gaps left by legacy tools.

The episode also explores the broader evolution of the developer ecosystem. From the increasing adoption of AI-powered coding tools to the growing interest in languages like Rust, David shares his perspective on how these trends are reshaping software development. He also discusses the challenges of balancing AI-generated code with the need for security and the potential for AI to exacerbate vulnerabilities if not carefully managed.

As the conversation wraps up, David touches on his research in sustainable computing and its implications for the tech industry. He highlights the positive strides being made toward greener computing practices and how developers can contribute to a more sustainable future.

This episode offers a rich blend of technical insights, forward-thinking ideas, and practical advice for developers and security professionals navigating the ever-changing landscape of software security and development.

Links

Follow Us

168 פרקים

#Security #Software Development #Tech News #Heavybit #Tech #News

The Secure Developer

The Development Of Security With David Mytton

The Secure Developer

59 subscribers

published לפני שנה

שתפו

MP3•בית הפרקים

Episode Summary

Show Notes

Links

Follow Us

168 פרקים

#Security #Software Development #Tech News #Heavybit #Tech #News

כל הפרקים

1
The Future is Now with Michael Grinich (WorkOS) 33:11

לפני 11 ימים33:11

33:11

Episode Summary Will AI replace developers? In this episode, Snyk CTO Danny Allan chats with Michael Grinich , the founder and CEO of WorkOS , about the evolving landscape of software development in the age of AI. Michael shares a fascinating analogy, comparing the shift in software engineering to the historical evolution of music, from every family having a piano to the modern era of digital creation with tools like GarageBand. They explore the concept of "vibe coding," the future of development frameworks, and how lessons from the browser wars—specifically the advent of sandboxing—can inform how we build secure AI-driven applications. Show Notes In this episode, Danny Allan, CTO at Snyk, is joined by Michael Grinich, Founder and CEO of WorkOS, to explore the profound impact of AI on the world of software development. Michael discusses WorkOS's mission to enhance developer joy by providing robust, enterprise-ready features like authentication, user management, and security, allowing developers to remain in a creative flow state. The conversation kicks off with the provocative question of whether AI will replace developers. Michael offers a compelling analogy, comparing the current shift to the historical evolution of music, from a time when a piano was a household staple to the modern era where tools like GarageBand and Ableton have democratized music creation. He argues that while the role of a software engineer will fundamentally change, it won't disappear; rather, it will enable more people to create software in entirely new ways. The discussion then moves into the practical and security implications of this new paradigm, including the concept of "vibe coding," where applications can be generated on the fly based on a user's description. Michael cautions that you can't "vibe code" your security infrastructure, drawing a parallel to the early, vulnerable days of web browsers before sandboxing became a standard. He predicts that a similar evolution is necessary for the AI world, requiring new frameworks with tightly defined security boundaries to contain potentially buggy, AI-generated code. Looking to the future, Michael shares his optimism for the emergence of open standards in the AI space, highlighting the collaborative development around the Model Context Protocol (MCP) by companies like Anthropic, OpenAI, Cloudflare, and Microsoft. He believes this trend toward openness, much like the open standards of the web (HTML, HTTP), will prevent a winner-take-all scenario and foster a more innovative and accessible ecosystem. The episode wraps up with a look at the incredible energy in the developer community and how the challenge of the next decade will be distributing this powerful new technology to every industry in a safe, secure, and trustworthy manner. Links WorkOS - Your app, enterprise ready WorkOS on YouTube MIT MCP Night 2025 Snyk - The Developer Security Company Follow Us Our Website Our LinkedIn…

1
Open Authorization In The World Of AI With Aaron Parecki 36:07

לפני 11 weeks36:07

36:07

Episode Summary How do we apply the battle-tested principles of authentication and authorization to the rapidly evolving world of AI and Large Language Models (LLMs)? In this episode, we're joined by Aaron Parecki , Director of Identity Standards at Okta , to explore the past, present, and future of OAuth. We dive into the lessons learned from the evolution of OAuth 1.0 to 2.1, discuss the critical role of standards in securing new technologies, and unpack how identity frameworks can be extended to provide secure, manageable access for AI agents in enterprise environments. Show Notes In this episode, host Danny Allan is joined by a very special guest, Aaron Parecki, the Director of Identity Standards at Okta, to discuss the critical intersection of identity, authorization, and the rise of artificial intelligence. Aaron begins by explaining the history of OAuth, which was created to solve the problem of third-party applications needing access to user data without the user having to share their actual credentials. This foundational concept of delegated access has become ubiquitous, but as technology evolves, so do the challenges. Aaron walks us through the evolution of the OAuth standard, from the limitations of OAuth 1 to the flexibility and challenges of OAuth 2, such as the introduction of bearer tokens. He explains how the protocol was intentionally designed to be extensible, allowing for later additions like OpenID Connect to handle identity and DPoP to enhance security by proving possession of a token. This modular design is why he is now working on OAuth 2.1—a consolidation of best practices—instead of a complete rewrite. The conversation then shifts to the most pressing modern challenge: securing AI agents and LLMs that need to interact with multiple services on a user's behalf. Aaron details the new "cross-app access" pattern he is working on, which places the enterprise Identity Provider (IDP) at the center of these interactions. This approach gives enterprise administrators crucial visibility and control over how data is shared between applications, solving a major security and management headache. For developers building in this space today, Aaron offers practical advice: leverage individual user permissions through standard OAuth flows rather than creating over-privileged service accounts. Links Okta OpenID Foundation IETF The House Files PDX (YouTube Channel) WIMSE AuthZEN Working Group aaronpk on GitHub Snyk - The Developer Security Company Follow Us Our Website Our LinkedIn…

1
The Evolution Of Platform Engineering With Massdriver CEO Cory O’Daniel 40:01

לפני 13 weeks40:01

40:01

Episode Summary Dive into the ever-evolving world of platform engineering with Cory O’Daniel , CEO and co-founder of Massdriver . This episode explores the journey of DevOps, the challenges of building and scaling infrastructure, and the crucial role of creating effective abstractions to empower developers. Cory shares his insights on the shift towards platform engineering as a means to build more secure and efficient software by default. Show Notes In this episode of The Secure Developer, host Danny Allan sits down with Cory O’Daniel, CEO and co-founder of Massdriver, to discuss the dynamic landscape of platform engineering. Cory, a seasoned software engineer and first-time CEO, shares his extensive experience in the Infrastructure as Code (IaC) space, tracing his journey from early encounters with EC2 to founding Massdriver. He offers candid advice for developers aspiring to become CEOs, emphasizing the importance of passion and early customer engagement. The conversation delves into the evolution of DevOps over the past two decades, highlighting the constant changes in how software is run, from mainframes to serverless containers and now AI. Cory argues that the true spirit of DevOps lies in operations teams producing products that developers can easily use. He points out the challenge of scaling operations expertise, suggesting that IT and Cloud practices need to mature in software development to create better abstractions for developers, rather than expecting developers to become infrastructure experts. A significant portion of the discussion focuses on the current state of abstractions in IaC. Cory contends that existing public abstractions, like open-source Terraform modules, are often too generic and don't account for specific business logic, security, or compliance requirements. He advocates for operations teams building their own prescriptive modules that embed organizational standards, effectively shifting security left by design rather than by burdening developers. The episode also touches upon the potential and limitations of AI in the operations space, with Cory expressing skepticism about AI's current ability to handle the contextual complexities of infrastructure without significant, organization-specific training data. Finally, Cory shares his optimism for the future of platform engineering, viewing it as a return to the original intentions of DevOps, where operations teams ship software with ingrained security and compliance, leading to more secure systems by default. Links MassDriver Ansible Chef Terraform DevOps is Bullshit Elephant in the Cloud Docker Postgres OpenTofu Helm Redis Elixir Snyk - The Developer Security Company Follow Us Our Website Our LinkedIn…

1
The Future Of API Security With FireTail’s Jeremy Snyder 38:00

לפני 15 weeks38:00

38:00

Episode Summary Jeremy Snyder is the co-founder and CEO of FireTail , a company that enables organizations to adopt AI safely without sacrificing speed or innovation. In this conversation, Jeremy shares his deep expertise in API and AI security, highlighting the second wave of cloud adoption and his pivotal experiences at AWS during key moments in its growth from startup onwards. Show Notes In this episode of The Secure Developer, host Danny Allan sits down with Jeremy Snyder, the Co-founder and CEO of FireTail, to unravel the complexities of API security and explore its critical intersection with the burgeoning field of Artificial Intelligence. Jeremy brings a wealth of experience, tracing his journey from early days in computational linguistics and IT infrastructure, through a pivotal period at AWS during its startup phase, to eventually co-founding FireTail to address the escalating challenges in API security driven by modern, decoupled software architectures. The conversation dives deep into the common pitfalls and crucial best practices for securing APIs. Jeremy clearly distinguishes between authentication (verifying identity) and authorization (defining permissions), emphasizing that failures in authorization are a leading cause of API-related data breaches. He sheds light on vulnerabilities like Broken Object-Level Authorization (BOLA), explaining how seemingly innocuous practices like using sequential integer IDs can expose entire datasets if server-side checks are missed. The discussion also touches on the discoverability of backend APIs and the persistent challenges surrounding multi-factor authentication, including the human element in security weaknesses like SIM swapping. Looking at current trends, Jeremy shares insights from FireTail's ongoing research, including their annual "State of API Security" report, which has uncovered novel attack vectors such as attempts to deploy malware via API calls. A significant portion of the discussion focuses on the new frontier of AI security, where APIs serve as the primary conduit for interaction—and potential exploitation. Jeremy details how AI systems and LLM integrations introduce new risks, citing a real-world example of how a vulnerability in an AI's web crawler API could be leveraged for DDoS attacks. He speculates on the future evolution of APIs, suggesting that technologies like GraphQL might become more prevalent to accommodate the non-deterministic and data-hungry nature of AI agents. Despite the evolving threats, Jeremy concludes with an optimistic view, noting that the gap between business adoption of new technologies and security teams' responses is encouragingly shrinking, leading to more proactive and integrated security practices. Links FireTail Rapid7 Snyk - The Developer Security Company Follow Us Our Website Our LinkedIn…

1
The Case For Steward Ownership And Open Source With Melanie Rieback 44:11

לפני 17 weeks44:11

44:11

Episode Summary Is the traditional Silicon Valley startup model harming the security industry? In this episode of The Secure Developer, Danny Allan talks with Melanie Rieback , founder of Radically Open Security, about shaking up the industry with nonprofit business models. Tuning in, you’ll learn about the inner workings of Radically Open Security as a non-profit organization and the positive impact its donations have had on the open source ecosystem. We discuss the benefits of a steward-ownership business model, why it pairs so well with open source, and its power to reform venture capital and align incentives with long-term sustainability. For those interested in diving deeper, Melanie shares resources from her startup incubator, Nonprofit Ventures , and her free online Post Growth Entrepreneurship course . Tune in to learn why reforming our business models is vital for preserving and protecting our open source ecosystem and, by extension, security! Show Notes In this episode, Snyk CTO Danny Allan chats with Dr. Melanie Rieback, founder of Radically Open Security, about her journey from academia and pen testing to founding a cybersecurity company with a radically different business model. Melanie shares the motivations behind creating a not-for-profit organization that donates 90% of its profits to the NLnet Foundation, supporting open source and digital rights initiatives. They discuss the discontent with traditional cybersecurity business practices, including lack of transparency and ethical concerns like selling zero-days. Melanie explains Radically Open Security's structure, operating as a collective primarily using contractors, and how this model has allowed them to grow to 50 people while serving major clients and offering pro-bono work for nonprofits and critical open source projects like the Tor Project and Tails. The conversation then broadens to discuss alternative business models like steward ownership, where profit rights are separated from voting rights, aiming to lock value within the company and prevent mission drift often caused by traditional VC funding. They explore the concept of "Post Growth Entrepreneurship," which Melanie teaches, focusing on non-extractive business models and reforming finance itself. The discussion touches upon whether the tech industry, particularly open source, is moving towards more sustainable and ethical models, citing examples like Signal, Proton, Mastodon, and Mozilla. Melanie emphasizes that the culture of open source developers is often inherently altruistic, not greedy, but can be compromised by traditional funding systems. Finally, Melanie offers resources for listeners interested in learning more about these alternative models. Links Radically Open Security Radically Open Security on LinkedIn NLnet Foundation Nonprofit Ventures Post Growth Entrepreneurship Course Snyk - The Developer Security Company Follow Us Our Website Our LinkedIn…

1
Advancing AppSec With AI With Akira Brand 34:52

לפני 19 weeks34:52

34:52

Episode Summary In this episode of The Secure Developer, Danny Allan sits down with Akira Brand , AVP of Application Security at PRA Group , to explore the evolving landscape of application security and AI. Akira shares her unconventional journey from opera to cybersecurity, discusses why AppSec is fundamentally a customer service role and breaks down how AI is reshaping security workflows. Tune in to hear insights on integrating security seamlessly into development, AI’s role in secure coding, and the future of AppSec in a rapidly shifting tech landscape. Show Notes In this engaging episode, The Secure Developer welcomes Akira Brand, AVP of Application Security at PRA Group, for an in-depth discussion on the intersection of AI and application security. Akira’s unique background in opera and stage direction offers a fresh perspective on fostering collaboration in security teams and influencing organizational culture. Key Topics Covered: From Opera to AppSec: Akira shares her journey from classical music to cybersecurity and how her experience in stage direction translates into leading security teams. AppSec as a Customer Service Role: The importance of serving software engineers by providing security solutions that fit seamlessly into their workflows. The ‘Give Them the Pickle’ Approach: How meeting developers where they are and educating them can lead to better security adoption. AI’s Role in Secure Development: How AI-driven tools are transforming the way security is integrated into the software development lifecycle. Challenges in Security Culture: Why security is still an afterthought in many development processes and how to change that mindset. Future of AI in Security: The promise and risks of AI-assisted security tools and the need for standards to keep pace with rapid technological advancements. Links PRA Group Turing School Brian Holt Frontend Masters Resilia Snyk - The Developer Security Company Follow Us Our Website Our LinkedIn…

1
Authentication, Authorization, And The Future Of AI Security With Alex Salazar 38:36

לפני 21 weeks38:36

38:36

Episode Summary In this episode of The Secure Developer, host Danny Allan sits down with Alex Salazar , founder and CEO of Arcade , to discuss the evolving landscape of authentication and authorization in an AI-driven world. Alex shares insights on the shift from traditional front-door security to back-end agent interactions, the challenges of securing AI-driven agents, and the role of identity in modern security frameworks. The conversation delves into the future of AI, agentic workflows, and how organizations can navigate authentication, authorization, and security in this new era. Show Notes Danny Allan welcomes Alex Salazar, an experienced security leader and CEO of Arcade, to explore the transformation of authentication and authorization in AI-powered environments. Drawing from his experience at Okta, Stormpath, and venture capital, Alex provides a unique perspective on securing interactions between AI agents and authenticated services. Key topics discussed include: The Evolution of Authentication & Authorization: Traditional models focused on front-door access (user logins, SSO), whereas AI-driven agents require secure back-end interactions. Agentic AI and Security Risks: How AI agents interact with services on behalf of users, and why identity becomes the new perimeter in security. OAuth and Identity Challenges: Adapting OAuth for AI agents, ensuring least-privilege access, and maintaining security compliance. AI Hallucinations & Risk Management: Strategies for mitigating LLM hallucinations, ensuring accuracy, and maintaining human oversight. The Future of AI & Agentic Workflows: Predictions on how AI will continue to evolve, the rise of specialized AI models, and the intersection of AI and physical automation. Alex and Danny also discuss the broader impact of AI on developer productivity, with insights into how companies can leverage AI responsibly to boost efficiency without compromising security. Links Arcade.dev - Make AI Actually Do Things Okta - Identity OAuth - Authorization Protocol LangChain - Applications that Can Reason Hugging Face - The AI Community Building the Future Snyk - The Developer Security Company Follow Us Our Website Our LinkedIn…

1
Rethinking Secure Communication With Mrinal Wadhwa 40:32

לפני 23 weeks40:32

40:32

Episode Summary In this episode of The Secure Developer, Danny Allan sits down with Mrinal Wadhwa , CTO at Ockam , to explore the evolving landscape of secure communication in distributed systems. They discuss the challenges of securing microservices, IoT networks, and Kubernetes environments and how traditional TLS-based security models may no longer be sufficient. Mrinal shares insights into Ockam’s approach to end-to-end encrypted, mutually authenticated channels and the impact of WebAssembly, passkeys, and modern cryptographic identity management on security. Tune in for a deep dive into how organizations can rethink security at runtime to minimize risks in today’s complex digital ecosystems. Show Notes Security in modern applications is more challenging than ever, with microservices architectures, IoT deployments, and distributed computing environments introducing new risks. In this episode, Danny Allan welcomes Mrinal Wadhwa, CTO at Ockam, to discuss how secure communication models need to evolve beyond traditional TLS and perimeter-based defenses. Topics covered include: The challenges of securing microservices and Kubernetes clusters How end-to-end encryption and mutual authentication can minimize risk The importance of cryptographic identities and key rotation at scale How Ockam enables secure channels across multiple transport layers (TCP, Bluetooth, Kafka, etc.) The role of WebAssembly and passkeys in rethinking security models Shifting from perimeter-based security to secure-by-design communication Mrinal shares key insights on how organizations can rethink risk at runtime, considering the number of people and systems involved in data flow rather than just static build-time dependencies. Whether you're a security leader, developer, or architect, this episode provides actionable insights on building trust in your infrastructure without compromising performance or agility. Links Ockam Passkeys Overview Private Compute Cloud by Apple Snyk - The Developer Security Company Follow Us Our Website Our LinkedIn…

1
The Future Of Security, Privacy And Control With Wayne Chang 39:22

לפני 25 weeks39:22

39:22

Episode Summary In this episode of The Secure Developer, Danny Allan , CTO of Snyk, sits down with Wayne Chang , Founder and CEO of SpruceID , to explore the evolving landscape of digital identity and security. From self-sovereign identity to the role of AI in authentication, they discuss the future of identity management, the risks of centralized systems, and the benefits of decentralized approaches. They also dive into how policy, compliance, and emerging technologies like passkeys and zero-knowledge proofs are shaping the security ecosystem. Show Notes The world of digital identity is changing fast, and in this episode of The Secure Developer , we explore how security professionals and developers can navigate this evolving space. Host Danny Allan is joined by Wayne Chang, Founder and CEO of SpruceID, to discuss key trends and challenges in identity management. Topics Discussed: Wayne's Background: From health tech to digital identity, how Wayne’s early struggles with integrating health records led to his passion for self-sovereign identity. The Evolution of Digital Identity: Why usernames and passwords are no longer the gold standard, and how newer methods like passkeys and cryptographic credentials improve security. Decentralization vs. Centralization: The trade-offs between federated identity systems (like OAuth and SSO) and self-hosted identity wallets. The Role of AI in Identity Security: How AI is both a tool for improving security and a threat vector for identity fraud. Privacy and Compliance: How regulations like GDPR, CCPA, and emerging state-level laws influence digital identity strategies. The Future of Authentication: The move from multi-factor authentication to "myriad factor authentication," leveraging multiple signals for seamless and secure access. Wayne and Danny also discuss real-world use cases, including the development of mobile driver's licenses, emerging digital identity wallets, and the challenges of ensuring privacy and security while maintaining usability. The conversation highlights how organizations can stay ahead with better authentication practices and privacy-preserving architectures as fraud becomes more sophisticated. Links SpruceID - Identity infrastructure for the digital world NIST - The National Institute of Standards and Technology NIST SP 800-63 - Digital Identity Guidelines ACLU Digital ID State Legislative Recommendations Snyk - The Developer Security Company Follow Us Our Website Our LinkedIn…

1
Building Security Culture With Dustin Lehr 38:15

לפני 27 weeks38:15

38:15

Episode Summary Security is more than just a checklist—it’s a cultural movement. In this episode, Dustin Lehr , Co-founder of Katilyst , joins Danny Allan to explore the intersection of security, engineering, and culture. They discuss how to foster security champions, scale security programs, and build a culture where developers naturally integrate security into their workflows. Dustin shares insights from his extensive career, offering practical strategies for creating lasting change in security practices. Show Notes Security isn’t just about tools—it’s about people. In this episode of The Secure Developer , Dustin Lehr, Co-founder of Katilyst, joins Danny Allan to discuss the importance of building a strong security culture within engineering teams. Dustin shares his journey from software engineering to security leadership, emphasizing how security should be an extension of software quality. He highlights how security champions programs can empower developers to take ownership of security without disrupting their workflow. Key topics include: The evolution of software development and how security fits in Best practices for launching and sustaining a security champions program The psychology of change and how to influence developer behavior The role of AI in security culture—what works and what doesn’t Metrics and strategies for measuring the success of security initiatives With real-world insights and actionable advice, this episode is a must-listen for security and engineering leaders looking to scale security through culture, not just technology. Links Katilyst – Dustin Lehr’s company focused on security culture Security Champion Program Success Guide – A free resource for building effective security champion programs Snyk - The Developer Security Company Follow Us Our Website Our LinkedIn…

1
Securing And Defending Like Brazilian Jiu-Jitsu With Jeremiah Grossman 36:57

לפני 29 weeks36:57

36:57

Episode Summary Join Jeremiah Grossman , application security pioneer and former CEO of WhiteHat Security , as he reflects on decades of innovation in the industry, from the early days of OWASP to today’s AI-driven development landscape. Explore critical discussions about the escalating costs of security, aligning developer incentives, and the future challenges posed by AI-generated vulnerabilities. Packed with insights, this episode dives deep into the strategies and frameworks shaping the way we build and secure modern software. Show Notes In this episode of The Secure Developer , we sit down with Jeremiah Grossman, a pioneer in application security and former CEO of WhiteHat Security. Jeremiah shares fascinating insights from his decades of experience shaping the security landscape, including the origins of the OWASP project and his role in raising awareness about critical vulnerabilities like SQL injection and cross-site scripting. The conversation delves into how the industry has evolved over the past two decades, from the early days when nearly every application was riddled with vulnerabilities to today’s more robust frameworks and heightened security awareness. Despite these advancements, Jeremiah and Danny discuss why security spending remains high while organizations continue to struggle with improving their overall security posture. Key topics include: The misalignment of incentives in software development that prioritizes speed over security. The emerging role of cyber insurance in shaping organizational security practices. The challenges of unknown assets and their contribution to breaches, highlighting the importance of asset inventory and attack surface management. The impact of AI on software development, particularly the risks and opportunities presented by AI-generated code and new attack surfaces. Jeremiah also shares his thoughts on aligning incentives for secure development, including innovative approaches like developer performance metrics and reward structures for secure coding. The episode concludes with a look at Jeremiah’s current focus on venture capital and fostering innovation in security, as well as his personal passion for Brazilian jiu-jitsu and its parallels with the security industry. This episode is a deep dive into the critical challenges and opportunities facing modern security professionals, offering actionable insights and thought-provoking discussions for developers, CISOs, and security practitioners alike. Links OWASP (Open Web Application Security Project) Black Hat Node.js Brave Browser Chromium Cornell Study on AI Code Vulnerabilities Snyk - The Developer Security Company Follow Us Our Website Our LinkedIn…

1
The Development Of Security With David Mytton 34:23

לפני 31 weeks34:23

34:23

Episode Summary In this episode of The Secure Developer, host Danny Allan sits down with David Mytton , founder and CEO of Arcjet , former CEO of Server Density , and co-founder of Console.dev . David shares his insights into bridging the “developer-security gap” with Arcjet, a cutting-edge middleware SDK designed to empower developers with advanced security tools like rate limiting and bot protection. The conversation dives into the evolution of developer tools, the growing role of AI in coding, and the future of secure software development in modern environments. David also offers a fascinating perspective on sustainable computing and the impact of clean energy in the tech industry. Show Notes In this thought-provoking episode of The Secure Developer , host Danny Allan sits down with David Mytton, founder and CEO of Arcjet, to explore the evolving intersection of development, security, and AI. David, a serial entrepreneur with deep roots in cloud monitoring and developer tools, shares his journey from co-founding Server Density to building Arcjet, a groundbreaking solution for developers managing runtime security. The conversation begins with David’s take on why developers should prioritize security early in the development lifecycle. He highlights the challenges developers face in modern environments, where traditional security tools often fail to integrate seamlessly with serverless and edge computing platforms. David introduces Arcjet as an innovative SDK that empowers developers to implement rate-limiting, bot detection, and other security measures directly in their applications, offering a developer-first approach to runtime protection. Delving deeper, the discussion shifts to the rise of WebAssembly as a transformative technology. David explains how WebAssembly enables near-native performance across platforms while providing unparalleled isolation—making it a perfect fit for modern security needs. He contrasts this with traditional intrusion detection systems and outlines how Arcjet leverages WebAssembly to fill the gaps left by legacy tools. The episode also explores the broader evolution of the developer ecosystem. From the increasing adoption of AI-powered coding tools to the growing interest in languages like Rust, David shares his perspective on how these trends are reshaping software development. He also discusses the challenges of balancing AI-generated code with the need for security and the potential for AI to exacerbate vulnerabilities if not carefully managed. As the conversation wraps up, David touches on his research in sustainable computing and its implications for the tech industry. He highlights the positive strides being made toward greener computing practices and how developers can contribute to a more sustainable future. This episode offers a rich blend of technical insights, forward-thinking ideas, and practical advice for developers and security professionals navigating the ever-changing landscape of software security and development. Links Arcjet Console Acquia Rust Programming Language University of Oxford Snyk - The Developer Security Company Follow Us Our Website Our LinkedIn…

1
Securing The Future: How AI Is Transforming Vulnerability Detection With Berkay Berabi 29:45

לפני 33 weeks29:45

29:45

Episode Summary Imagine if AI could detect and fix vulnerabilities in your code faster and with greater precision than ever before. That future is already here! In today’s episode, we’re joined by Berkay Berabi , an AI researcher and Senior Software Engineer at Snyk , to dive into the cutting-edge world of AI-powered vulnerability detection. Berkay offers insight into how Snyk is leveraging a hybrid AI approach to detect and fix vulnerabilities in code, combining human-driven expertise with machine learning for greater accuracy and scalability. He also introduces CodeReduce , a game-changing tool by Snyk that strips away irrelevant code, streamlining the detection process and addressing the challenges posed by complex, multi-step data flows. Through rigorous model testing, Snyk ensures that AI-generated fixes are validated to prevent errors, making the process faster and more reliable. Show Notes In this fascinating episode of The Secure Developer, host Danny Allan sits down with Berkay Berabi, an AI researcher at Snyk, to explore the groundbreaking CodeReduce technology and its implications for software security. Berabi, who transitioned from electrical engineering to AI research, shares insights into how Snyk is revolutionizing vulnerability detection and remediation using artificial intelligence. The conversation delves deep into the technical aspects of CodeReduce, explaining how this innovative approach reduces complex code structures by up to 50 times their original size while maintaining vulnerability detection capabilities. Berabi explains the sophisticated process of code reduction, analysis, and fix generation, highlighting how AI models can better understand and address security vulnerabilities when working with simplified code. The discussion also covers the challenges of different AI models, from T5 to StarCoder and Mixtral, exploring their varying capabilities, accuracies, and performance trade-offs. The episode critically examines the future of AI in software development, addressing both opportunities and concerns. Berabi and Allan discuss recent findings about AI-generated code potentially introducing new vulnerabilities, referencing Gartner's prediction that by 2027, 25% of software vulnerabilities could be created by AI-generated code. They explore how tools like CodeReduce and other AI-powered security measures might help mitigate these risks while examining the broader implications of AI assistance in software development. This episode offers valuable insights for developers, security professionals, and anyone interested in the intersection of AI and software security. Links DeepCode AI Fix Research Paper DeepCode AI Fix Blog Post Follow Us Our Website Our LinkedIn…

לפני 3 years41:20

41:20

Malicious attacks are a real threat, especially with the essential role of open source in mind. Today’s guest, Liran Tal, is the director of developer advocacy at Snyk and. Github Star, and he is here to share a plethora of tips you can implement today to see a marked improvement in general posture and company safety. Tune in to hear Liran’s perspective on the state of malicious attacks today in comparison to previous years, how third-party dependencies can be problematic, and how a single attack can impact thousands of users, developers and CI machines. He believes that open source is an essential tool today and that the solution lies in better security. Listeners will also learn how security sanitization is different for each ecosystem, and hear some advice for security-conscious companies cautious not to restrict innovation by tightening up their security plan. Join us to hear all this and more from today’s expert voice from Snyk. Follow Us Our Website Our LinkedIn…

ברוכים הבאים אל Player FM!

Player FM סורק את האינטרנט עבור פודקאסטים באיכות גבוהה בשבילכם כדי שתהנו מהם כרגע. זה יישום הפודקאסט הטוב ביותר והוא עובד על אנדרואיד, iPhone ואינטרנט. הירשמו לסנכרון מנויים במכשירים שונים.

תקשיבו ל-500+ נושאים

59 subscribers

דומה לThe Secure Developer

Mighty Patch™ Original patch from Hero Cosmetics – The #1 Hydrocolloid Acne Pimple Patch for Shrinking Zits and Whiteheads in 1 use; Nighttime Spot Stickers for Face and Skin (36 Count)

Crayola Colored Pencils (36ct), Kids Pencil Set, Back to School Essentials, Must Have Classroom Supplies for Kids, Pre-Sharpened Coloring Book Pencils, 3+

Ailun 3 Pack Screen Protector for iPhone 16 Pro Max [6.9 inch] + 3 Pack Camera Lens Protector with Installation Frame,Sensor Protection,Dynamic Island Compatible,Case Friendly Tempered Glass Film

פודקאסטים ששווה להאזין

The Secure Developer « » The Development Of Security With David Mytton

The Development Of Security With David Mytton

פודקאסטים ששווה להאזין

ברוכים הבאים אל Player FM!

The Let Them Theory: A Life-Changing Tool That Millions of People Can't Stop Talking About

The Let Them Theory: A Life-Changing Tool That Millions of People Can't Stop Talking About

Amazon Basics Multipurpose Copy Printer Paper, 20 lb, 8.5 x 11 Inches, 10 Reams (5,000 Sheets), 92 Bright, White

Amazon Basics Multipurpose Copy Printer Paper, 8.5 x 11 Inches, 20 lb, 1 Ream, (500 Sheets), 92 Bright, White

The Let Them Theory: A Life-Changing Tool That Millions of People Can't Stop Talking About

דומה לThe Secure Developer

מדריך עזר מהיר

The Secure Developer « »
The Development Of Security With David Mytton