Listen Score
LS 25
Global Rank
TOP 10%

ÜBER DIESEN PODCAST 🔗

Aktualisierungshäufigkeit:
biweekly
Durchschnittliche Audiolänge:
8 minutes
Englisch
Vereinigte Staaten
17 Folgen
seit 21. März 2026
episodic

NEUESTE FOLGEN 🔗

Your AI agent can read files, execute commands, install software, connect to external services, and maybe even deploy to production. But should it have permission to do all of those things? In Season 2, Episode 3 of DevSec Station, Tanya Janca (SheHacksPurple) explores one of the most important pri…

VERGANGENE FOLGEN SUCHEN

Vorhandene Folgen von DevSec Station durchsuchen.

FRÜHERE EPISODEN

Two critical PHP vulnerabilities have been disclosed, and even applications written with secure coding practices may be affected. In this special bulletin of DevSec Station, Tanya Janca (SheHacksPurple) explains PHP2Shell, why vulnerabilities in the underlying PHP runtime can put otherwise secure a…
I asked Claude to build me a little application that would greet me every morning.Nothing complicated. Just say hello, call me a Queen, give me a compliment, and share an inspirational quote. Cute, right? Except Claude didn't just write the code. It built the application, published it, execute…
What happens when your AI assistant does exactly what you expect 59 times... and then does something completely bananas on the 60th?While teaching a secure coding class, I watched nearly 60 students use the same AI assistant, programming language, and prompts. For 59 of them, everything went as exp…
Security problems don't generally happen because developers 'don't care' or lack skill. They happen because no one clearly defined what "secure" meant in the first place. When security expectations are left implicit, developers are forced to guess. And that's wher…
Threat modeling has a reputation for being complicated, full of diagrams, and requiring long meetings. In reality, most developers already do it, they just don't realize it. The difference is that doing it intentionally helps you catch security problems before they become security incidents. I…
Secure code review isn't about finding obscure vulnerabilities or thinking like an elite hacker. It's about verifying that the security controls your application depends on are actually present, in the right place, and correctly implemented. In this episode of DevSec Station, Tanya Janca …
Security bugs aren't usually caused by 'bad developers'. More often, they're the result of good developers making rational decisions under deadlines, competing priorities, and imperfect systems. In this episode of DevSec Station, Tanya Janca explores why common secure coding mis…
Security training has its place. But if training alone solved security problems, we wouldn't keep seeing the same vulnerabilities appear over and over again. The real problem usually isn't that developers don't know what to do; it's that the easiest path is often an insecure one…
Security tools are supposed to help developers build safer software. But sometimes it seems like they create more frustration than security. In this episode of DevSec Station, Tanya Janca explains why many security tools overwhelm developers with alerts, how alert fatigue erodes trust, and why &quo…
Rechtliche Hinweise: Der auf dieser Seite eingebettete Podcast und das Bildmaterial stammen von Tanya Janca | SheHacksPurple, das Eigentum seines Eigentümers ist und nicht mit Listen Notes, Inc. verbunden ist oder von diesen unterstützt wird.