معلومات عن هذه الحلقة
In this weeks episode we are lucky to be joined by Scott Arciszewski to discuss all things Security. We start off by chatting about a recent talk he gave at DEF CON 25 and the importance of secure API design. From here we highlight Google Tink, misunderstandings of how PHP has changed over the years and what CVE’s are. This leads us on to delve into the tools and processes used within the reconnaissance phase of a security engagement. Finally, we briefly mention Quantum Computing and its impact on cryptography - followed by best practises for securely managing secrets within web applications.
Show Links- Paragon Initiative Enterprises
- Scott Arciszewski on Twitter
- NaCl - Networking and Cryptography library
- google/tink
- PHP Implementation? - google/tink - GitHub
- PHP RFC - Flexible Heredoc and Nowdoc Syntaxes
- Common Vulnerabilities and Exposures (CVE)
- Common Weakness Enumeration
- Shodan
- Nmap - the Network Mapper
- Burp Suite Scanner
- Puppy Linux
- klange/ponyos - My Little Unix, Kernels are Magic!
- Fiddler - Web Debugging Proxy
- Charles Web Debugging Proxy
- OWASP Zed Attack Proxy Project - OWASP
- How and Why Developers Use Asymmetric (Public Key) Cryptography in Real-World Applications
- Secrets, Secrets, Are No Fun - PHP Roundtable
- Keeping Credentials Secure in PHP
- Securing Credentials for PHP with Docker
- Vault by HashiCorp
- AWS Secrets Manager
الإنجليزية
المملكة المتحدة
النص 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
البحث في الحلقات الماضية
البحث في الحلقات السابقة من Three Devs and a Maybe.
حلقات أخرى في هذا البودكاست
In this weeks episode we start off discussion around testing in a Continuous Integration pipeline, and setting up a personal Bamboo CI system.
We then move on to separating domain logic from the delivery, and how a Package-Bridge-Delivery split works.
After a small mouse related intermission, we to…
In this weeks episode we are lucky to have Scott Wlaschin back on the show to discuss his most recent talk ‘Four Languages from Forty Years Ago’.
We start off by talking about why the 1970’s was such an influential decade for language design.
This leads us on to highlight what a programming languag…
In this weeks episode Mick and Edd have a long overdue catchup!
We start off the show by discussing Mick’s new job, the new stack he is using, and the benefits of working in a team.
From here we highlight how his company uses Scrum (Sprints, Planning Poker and Story Points), handling event-sourced …
In this weeks episode we are lucky to be joined by Neal Brooks, a fellow developer of Edd’s at MyBuilder.
We start off by discussing how he got into programming, QBasic and video driver shenanigans.
From here, we move on to introduce his SymfonyLive London talk ‘Running Symfony on AWS Lambda’.
We h…
إخلاء المسؤولية: البودكاست والأعمال الفنية المضمنة في هذه الصفحة مأخوذة من Michael Budd, Fraser Hart, Lewis Cains, Edd Mann، وهي مملوكة لمالكها وليست تابعة لشركة Listen Notes, Inc أو معتمدة منها.
تعديل
شكراً على مساعدتنا في الحفاظ على قاعدة بيانات البودكاست مُحدَّثة.
