Why Current Security Tools Fail Developers
Security tools are supposed to help developers build safer software. But sometimes it seems like they create more frustration than security.
This episode is sponsored by Maze.
In this episode of DevSec Station, Tanya Janca explains why many security tools overwhelm developers with alerts, how alert…
Secure Defaults Beat Secure Training
Security training has its place. But if training alone solved security problems, we wouldn't keep seeing the same vulnerabilities appear over and over again. The real problem usually isn't that developers don't know what to do; it's that the easiest path is often an insecure one.
This episode is sp…
The Most Common Secure Coding Mistakes Good Devs Make
Security bugs aren't usually caused by 'bad developers'. More often, they're the result of good developers making rational decisions under deadlines, competing priorities, and imperfect systems.
This episode is sponsored by Maze.
In this episode of DevSec Station, Tanya Janca explores why common se…
How to Do Secure Code Review (When You’re Not a Security Expert)
Secure code review isn't about finding obscure vulnerabilities or thinking like an elite hacker. It's about verifying that the security controls your application depends on are actually present, in the right place, and correctly implemented.
This episode is sponsored by Maze.
In this episode of Dev…
Can you trust vibe coding?
What if you could create an app simply by describing what you wanted? Vibe coding is the use of conversational AI to build apps, websites, and software. The Debrief is joined by cybersecurity expert Tanya Janca, better known as SheHacksPurple, to explain what vibe coding actually is, and what can g…
Threat Modeling for Developers (How To)
Threat modeling has a reputation for being complicated, full of diagrams, and requiring long meetings. In reality, most developers already do it, they just don't realize it. The difference is that doing it intentionally helps you catch security problems before they become security incidents.
This e…
Security Requirements: What They Are and How to Add Them to Your Project
Security problems don't generally happen because developers 'don't care' or lack skill. They happen because no one clearly defined what "secure" meant in the first place. When security expectations are left implicit, developers are forced to guess. And that's where vulnerabilities are born.
This ep…
WW 989: Deer Hate MSDN - Point-in-Time Restore Arrives for Windows 11
Windows 12 is stalled and the real reasons go far beyond software. The conversation unpacks how soaring hardware prices, AI chaos, and market confusion have Microsoft in a holding pattern. Also, Paul finally took a sledgehammer to the subscription services he pays for, and more is on the way. Plus,…
WW 989: Deer Hate MSDN - Point-in-Time Restore Arrives for Windows 11
Windows 12 is stalled and the real reasons go far beyond software. The conversation unpacks how soaring hardware prices, AI chaos, and market confusion have Microsoft in a holding pattern. Also, Paul finally took a sledgehammer to the subscription services he pays for, and more is on the way. Plus,…
Your AI Worked 59 Times. What About the 60th?
What happens when your AI assistant does exactly what you expect 59 times... and then does something completely bananas on the 60th?While teaching a secure coding class, I watched nearly 60 students use the same AI assistant, programming language, and prompts. For 59 of them, everything went as exp…
موتور جستجوی پادکست
می توانید از وب سایت ما برای جستجوی پادکست های3,824,489و قسمت های195,762,622بر اساس افراد، مکان ها یا موضوعات استفاده کنید.
I have no special talent. I am only passionately curious, and
I listen to podcasts.
‐ Albert "Llamacorn" Einstein
ویرایش
از کمک شما برای بروز نگهداشتن پایگاهدادههای پادکست سپاسگزاریم