Security Archives - Software Engineering Daily

Apr 26 2024 93 ep. 50 mins 649
Security Archives - Software Engineering Daily Podcast artwork

Security episodes of Software Engineering Daily

  Technology
RSS feed Share
Copy RSS


Subscribe on Podcast Addict


Authlete and Making OAuth Accessible with Justin Richer

Apr 11 2024 60 mins  
OAuth is an open standard for access delegation. It lets users grant websites or applications access to their information on other websites, but without giving away passwords. OpenID Connect is an identity layer on top of OAuth. Even if you haven’t programmed using OAuth and OpenID Connect, you’ve certainly used them for authentication on Google,

Biometric Authentication with Vincent Delitz

Mar 13 2024 41 mins  
Corbado is an authentication platform that provides APIs for developers to replace passwords with passkeys such as Face ID or Touch ID. Vincent Delitz is a Co-Founder at Corbado and he joins the show to talk about the platform, the changing authentication landscape, the challenge of session management with passkeys, and more. Gregor Vand is

SimpleWebAuthn with Matthew Miller

Feb 14 2024 64 mins  
SimpleWebAuthn is an open source TypeScript-centric pair of libraries – frontend and backend – that make it easier for devs to implement WebAuthn on the web. Matthew Miller started the project in 2019 and it has grown in tandem with the popularization of WebAuthn. He joins the podcast today to talk about the history of

OpsHelm with Kyle McCullough

Jan 17 2024 35 mins  
Security issues can often be traced back to small misconfigurations in a database or cloud service, or an innocent code commit. OpsHelm is a security platform that’s oriented around identifying and fixing these issues. Kyle McCullough is the Co-Founder and CTO of OpsHelm and he has deep experience in backend and data engineering. He joins

Apiiro Security Posture Management with Yonatan Eldar

Jan 03 2024 42 mins  
Software supply chain security is a major challenge in the modern engineering environment. Many teams are working to establish best practices to proactively identify, fix, and prevent risks in their applications. Apiiro is a platform designed to solve this problem and gives risk visibility, prioritization, and remediation. Yonatan Eldar is the Co-Founder and CTO at

Blocking Ransomware Attacks with Anthony Cusimano

Dec 21 2023 47 mins  
Ransomware attacks involve the deployment of malware that blocks access to a user’s or organization’s computer files by encrypting them. The attackers then demand a ransom payment in exchange for the decryption key that will restore access to the files. These attacks are often directed at governments and corporations, and can be costly. Veeam is

Software Supply Chain Security with Michael Lieberman

Dec 06 2023 43 mins  
One of the most famous software exploits in recent years was the SolarWinds attack in 2020. In this attack, Russian hackers inserted malicious code into the SolarWinds Orion system, allowing them to infiltrate the systems of numerous corporations and government agencies, including the U.S. executive branch, military, and intelligence services. This was an example of

KubeCon Special: Sigstore with Santiago Torres-Arias

Dec 03 2023 42 mins  
This episode of Software Engineering Daily is part of our on-site coverage of KubeCon 2023, which took place from November 6th through 9th in Chicago. In today’s interview, host Jordi Mon Companys speaks with Santiago Torres-Arias who is a contributor to Sigstore, which is a system to register software supply chain actors using federated identity

The Future of HTTP with Nick Shadrin and Roman Arutyunyan

Oct 11 2023 40 mins  
The Hypertext Transfer Protocol, or HTTP, is used to load webpages using hypertext links, and it’s the foundation of the web. Tim Berners-Lee famously created HTTP version 0.9 in 1989, and defined the essential behavior of a client and a server. Version 1.0 was eventually finalized in 1996, and its secure variant called HTTPS is

Minimum Viable Security for Cloud Apps with David Melamed

Sep 12 2023 44 mins  
Cloud applications continue to grow in popularity, but ensuring the security of these applications often presents a formidable engineering challenge. This challenge motivated the creation of Jit. Jit is a continuous security platform for developers, and seeks to enable every cloud app to start with minimum viable security, or MVS, without slowing development velocity. David