Enhancing OAuth Security and Interoperability Using FAPI with Joseph Heenan

Software Engineering Daily

Player FM - Internet Radio Done Right

40 subscribers

Đã thêm cách đây sáu năm

Nội dung được cung cấp bởi Software Engineering Daily. Tất cả nội dung podcast bao gồm các tập, đồ họa và mô tả podcast đều được Software Engineering Daily hoặc đối tác nền tảng podcast của họ tải lên và cung cấp trực tiếp. Nếu bạn cho rằng ai đó đang sử dụng tác phẩm có bản quyền của bạn mà không có sự cho phép của bạn, bạn có thể làm theo quy trình được nêu ở đây https://vi.player.fm/legal.

<div class="span index">1</div> <span><a class="" data-remote="true" data-type="html" href="/series/this-is-womans-work-with-nicole-kalil">This Is Woman's Work with Nicole Kalil</a></span>

1
This Is Woman's Work with Nicole Kalil

Hủy theo dõi

cách đây 3 ngày trướccách đây 3d ago

Hủy theo dõi

Hàng tuần+

Together, we're redefining what it means, looks and feels like, to be doing "woman's work" in the world today. With confidence and the occasional rant. From boardrooms to studios, kitchens to coding dens, we explore the multifaceted experiences of today's woman, confirming that the new definition of "woman's work" is whatever feels authentic, true, and right for you. We're shedding expectations, setting aside the "shoulds", giving our finger to the "supposed tos". We're torching the old playbook and writing our own rules. Who runs the world? You decide. Learn more at nicolekalil.com

cách đây khoảng một năm trước 42:48

MP3•Trang chủ episode

FAPI is a refinement of the OAuth standard developed by the OpenID Foundation. It was conceived to solve a core problem of providing a consistent approach to API security across the financial industry, with the goal of enhancing interoperability of financial data exchange. It has now been adopted across many different industries in applications where there is an API that requires a heightened authorization security implementation.

Authlete is a service that provides a set of APIs to implement OAuth Authorization Servers and OpenID Connect identity providers, allowing either to be easily made FAPI-compliant.

Joseph Heenan is the CTO at Authlete, and he also leads the certification program at the OpenID foundation. He joins the podcast with Gregor Vand to talk about the origins of FAPI, the motivations for its creation, the status of FAPI development, and more.

Full Disclosure: This episode is sponsored by Authlete.

Software Engineering Daily listeners can get a free 90 day trial of Authlete at https://authlete.com/sed

Gregor Vand is a security-focused technologist, and is the founder and CTO of Mailpass. Previously, Gregor was a CTO across cybersecurity, cyber insurance and general software engineering companies. He has been based in Asia Pacific for almost a decade and can be found via his profile at vand.hk.

Please click here to see the transcript of this episode.

Sponsorship inquiries: sponsor@softwareengineeringdaily.com

2072 tập

#Jeffmeyerson #Softwaredevelopment #Softwareengineering #News #Tech News #Software Daily

Enhancing OAuth Security and Interoperability Using FAPI with Joseph Heenan

Software Engineering Daily

40 subscribers

published cách đây khoảng một năm trước

Chia sẻ

MP3•Trang chủ episode

Authlete is a service that provides a set of APIs to implement OAuth Authorization Servers and OpenID Connect identity providers, allowing either to be easily made FAPI-compliant.

Full Disclosure: This episode is sponsored by Authlete.

Software Engineering Daily listeners can get a free 90 day trial of Authlete at https://authlete.com/sed

Please click here to see the transcript of this episode.

Sponsorship inquiries: sponsor@softwareengineeringdaily.com

2072 tập

#Jeffmeyerson #Softwaredevelopment #Softwareengineering #News #Tech News #Software Daily

Tất cả các tập

1
StackHawk and Shift-Left API Security with Scott Gerlach 46:07

cách đây 1 day trước46:07

46:07

StackHawk is a company that scans and monitors source code to obtain the full scope of an organization's APIs and applications, and runs tests to identify vulnerabilities and address them pre-production. Scott Gerlach is the Co-Founder and Chief Security Officer at StackHawk and previously worked at SendGrid and GoDaddy. He has an extensive background running security operations and engineering and, in this episode, he joins the show to talk about the challenges around API security and leading-edge strategies to address them. Full Disclosure: This episode is sponsored by 10kMedia (StackHawk). Gregor Vand is a security-focused technologist, and is the founder and CTO of Mailpass. Previously, Gregor was a CTO across cybersecurity, cyber insurance and general software engineering companies. He has been based in Asia Pacific for almost a decade and can be found via his profile at vand.hk. Please click here to see the transcript of this episode. Sponsorship inquiries: sponsor@softwareengineeringdaily.com…

1
NVIDIA RAPIDS and Open Source ML Acceleration with Chris Deotte and Jean-Francois Puget 42:32

cách đây 4 ngày trước42:32

42:32

NVIDIA RAPIDS is an open-source suite of GPU-accelerated data science and AI libraries. It leverages CUDA and significantly enhances the performance of core Python frameworks including Polars, pandas, scikit-learn and NetworkX. Chris Deotte is a Senior Data Scientist at NVIDIA and Jean-Francois Puget is the Director and a Distinguished Engineer at NVIDIA. Chris and Jean-Francois are also Kaggle Grandmasters, which is the highest rank a data scientist or machine learning practitioner can achieve on Kaggle, a competitive platform for data science challenges. In this episode, they join the podcast with Sean Falconer to talk about Kaggle, GPU-acceleration for data science applications, where they’ve achieved the biggest performance gains, the unexpected challenges with tabular data, and much more. Sean's been an academic, startup founder, and Googler. He has published works covering a wide range of topics from AI to quantum computing. Currently, Sean is an AI Entrepreneur in Residence at Confluent where he works on AI strategy and thought leadership. You can connect with Sean on LinkedIn. Please click here to see the transcript of this episode. Sponsorship inquiries: sponsor@softwareengineeringdaily.com…

1
Browser Security with Jeswin Mathai 50:00

cách đây 9 ngày trước50:00

50:00

Browser security aims to protect users from cyber threats encountered online, such as phishing, malicious extensions, and malware. It's a complex, multifaceted challenge that's increasingly important as cloud-based tools, SaaS platforms, and collaborative applications become the backbone of modern workflows. Jeswin Mathai is the Chief Architect at SquareX which is a cybersecurity company focused on protecting users and companies from web-based threats. Jeswin joins the podcast to talk about SquareX and modern strategies for browser security. Gregor Vand is a security-focused technologist, and is the founder and CTO of Mailpass . Previously, Gregor was a CTO across cybersecurity, cyber insurance and general software engineering companies. He has been based in Asia Pacific for almost a decade and can be found via his profile at vand.hk. Please click here to see the transcript of this episode. Sponsorship inquiries: sponsor@softwareengineeringdaily.com…

1
Troubleshooting Microservices with Julia Blase 43:00

cách đây 11 ngày trước43:00

43:00

A distributed system is a network of independent services that work together to achieve a common goal. Unlike a monolithic system, a distributed system has no central point of control, meaning it must handle challenges like data consistency, network latency, and system failures. Debugging distributed systems is conventionally considered challenging because modern architectures consist of numerous microservices communicating across networks, making failures difficult to isolate. The challenges and maintenance burdens can magnify as systems grow in size and complexity. Julia Blase is a Product Manager at Chronosphere where she works on features to help developers troubleshoot distributed systems more efficiently, including Differential Diagnosis, or DDx. DDx provides tooling to troubleshoot distributed systems, and emphasizes automation and developer experience. In this episode Julia joins Sean Falconer to talk about the challenges and emerging strategies to troubleshoot distributed systems. Full Disclosure: This episode is sponsored by Chronosphere. Sean's been an academic, startup founder, and Googler. He has published works covering a wide range of topics from AI to quantum computing. Currently, Sean is an AI Entrepreneur in Residence at Confluent where he works on AI strategy and thought leadership. You can connect with Sean on LinkedIn. Please click here to see the transcript of this episode. Sponsorship inquiries: sponsor@softwareengineeringdaily.com…

1
Vercel’s Developer Frameworks with Ary Khandelwal and Max Leiter 53:13

cách đây 16 ngày trước53:13

53:13

The availability of high-quality AI model APIs has drastically lowered the barriers developing AI applications. These tools abstract away complex tasks such as model deployment, scaling, data retrieval, natural language processing, and text generation. Vercel has developed a complementary set of tools for building AI web applications, including their AI SDK, v0, and the shadcn/ui component framework. Ary Khandelwal and Max Leiter are on the AI team at Vercel. In this episode they join Kevin Ball to talk about the AI SDK, v0, shadcn/ui and the AI tooling ecosystem at Vercel. Kevin Ball or KBall, is the vice president of engineering at Mento and an independent coach for engineers and engineering leaders. He co-founded and served as CTO for two companies, founded the San Diego JavaScript meetup, and organizes the AI inaction discussion group through Latent Space. Please click here to see the transcript of this episode. Sponsorship inquiries: sponsor@softwareengineeringdaily.com…

1
Docusign for Developers with Dan Selman and Larry Jin 45:10

cách đây 18 ngày trước45:10

45:10

They function as trusted artifacts to capture the nature of a commitment and provide clarity and accountability. Software has revolutionized many business functions, including the basic mechanics of digitally signing an agreement. However, the process of managing agreements systematically and at scale with type definitions, programmatic document creation, and storage schemas remains a complex and largely unsolved challenge. Dan Selman is the product architect at DocuSign and was previously co-founder and CTO of the Smart Agreements Platform, Clause. Larry Jin is the VP of Product Management at DocuSign and previously worked at Amazon, Microsoft, and Google. DocuSign recently released a developer API focused on fully modernizing and scaling the agreements process. In this episode, Dan and Larry joined Sean Falconer to talk about the frontier of digital agreements. Full Disclosure: This episode is sponsored by Docusign (Archetype). Sean's been an academic, startup founder, and Googler. He has published works covering a wide range of topics from AI to quantum computing. Currently, Sean is an AI Entrepreneur in Residence at Confluent where he works on AI strategy and thought leadership. You can connect with Sean on LinkedIn. Please click here to see the transcript of this episode. Sponsorship inquiries: sponsor@softwareengineeringdaily.com…

1
The Subsea Cable Network with Josh Dzieza 45:18

cách đây 23 ngày trước45:18

45:18

Subsea cables are high-capacity fiber-optic lines laid along the ocean floor to enable global communication by transmitting data between continents. Spanning thousands of miles, they carry an estimated 95% of international internet, phone, and data transmissions. Critically, these cables are vulnerable to sabotage by state actors, as they form critical infrastructure for global communication and economic stability. Indeed, Russia and China have been implicated in activities targeting subsea cables as recently as November 2024, and experts warn that these networks are likely to be focal points in future conflicts, heightening geopolitical tensions. Josh Dzieza is a reporter for The Verge and has covered the subsea cable industry and the strategic importance of subsea cables. He joins the podcast alongside Gregor Vand to discuss this invisible, and increasingly important, network infrastructure. You can check out Josh’s reporting here . Gregor Vand is a security-focused technologist, and is the founder and CTO of Mailpass. Previously, Gregor was a CTO across cybersecurity, cyber insurance and general software engineering companies. He has been based in Asia Pacific for almost a decade and can be found via his profile at vand.hk. Please click here to see the transcript of this episode. Sponsorship inquiries: sponsor@softwareengineeringdaily.com…

1
LangChain and Agentic AI Engineering with Erick Friis 43:08

cách đây 25 ngày trước43:08

43:08

LangChain is a popular open-source framework to build applications that integrate LLMs with external data sources like APIs, databases, or custom knowledge bases. It’s commonly used for chatbots, question-answering systems, and workflow automation. Its flexibility and extensibility have made it something of a standard for creating sophisticated AI-driven software. Erick Friis is a Founding Engineer at LangChain and he leads their integrations and open source efforts. Erick joins the podcast to talk about what inspired the creation of LangChain, agentic flows vs. chained flows, emerging patterns of agentic AI design, and much more. Sean's been an academic, startup founder, and Googler. He has published works covering a wide range of topics from AI to quantum computing. Currently, Sean is an AI Entrepreneur in Residence at Confluent where he works on AI strategy and thought leadership. You can connect with Sean on LinkedIn. Please click here to see the transcript of this episode. Sponsorship inquiries: sponsor@softwareengineeringdaily.com…

1
Secure Communications in Embedded Systems with Ismael Valenzuela and John Wall 46:43

cách đây 30 ngày trước46:43

46:43

BlackBerry is a Canadian company known for its pivotal role in the smartphone market during the 2000s. Today, BlackBerry has adopted a major focus on cybersecurity. John Wall is SVP and Head of BlackBerry QNX, overseeing engineering, product and operations. Ismael Valenzuela is Vice President of Threat Research and Intelligence at BlackBerry, where he leads threat research, intelligence, and defensive innovation. John and Ismael join the podcast to talk about cybersecurity at Blackberry, including secure communications in embedded systems. Gregor Vand is a security-focused technologist, and is the founder and CTO of Mailpass. Previously, Gregor was a CTO across cybersecurity, cyber insurance and general software engineering companies. He has been based in Asia Pacific for almost a decade and can be found via his profile at vand.hk. Please click here to see the transcript of this episode. Sponsorship inquiries: sponsor@softwareengineeringdaily.com…

1
Caves of Qud with Brian Bucklew 47:06

cách đây 4 weeks trước47:06

47:06

Caves of Qud is a roguelike game set in a richly detailed, post-apocalyptic world blending science fiction and fantasy. The game is known for its deep lore, emergent gameplay, and wildly creative character customization. It is a massive indie success, and recently hit a major milestone with the release of version 1.0 after 15 years of development. Brian Bucklew is the cofounder of Freehold games which develops Caves of Qud. Brian joins the show to talk about his engineering background and the development of his game. Joe Nash is a developer, educator, and award-winning community builder, who has worked at companies including GitHub, Twilio, Unity, and PayPal. Joe got his start in software development by creating mods and running servers for Garry’s Mod, and game development remains his favorite way to experience and explore new technologies and concepts. Please click here to see the transcript of this episode. Sponsorship inquiries: sponsor@softwareengineeringdaily.com…

1
Maximizing Cloud Efficiency with Jerzy Grzywinski and Brent Segner 45:52

cách đây 5 weeks trước45:52

45:52

Compute optimization in a cloud environment is a common challenge because of the need to balance performance, cost, and resource availability. The growing use of GPUs for workloads, including AI, is also increasing the complexity and importance of optimization given the relatively high cost of GPU cloud computation. Jerzy Grzywinski is a Senior Director of Software Engineering and leads FinOps at Capital One . Brent Segner is a distinguished engineer at Capital One and is focused on performance engineering and cloud cost optimization. Jerzy and Brent joined the show with Sean Falconer to talk about methods to measure compute efficiency, horizontal versus vertical scaling, how to think about adopting new instance types, the effect of different languages on compute efficiency, and much more. Full Disclosure: This episode is sponsored by Capital One . Sean's been an academic, startup founder, and Googler. He has published works covering a wide range of topics from AI to quantum computing. Currently, Sean is an AI Entrepreneur in Residence at Confluent where he works on AI strategy and thought leadership. You can connect with Sean on LinkedIn. Please click here to see the transcript of this episode. Sponsorship inquiries: sponsor@softwareengineeringdaily.com…

1
NVIDIA’s Agentic AI for Container Security with Amanda Saunders and Allan Enemark 46:12

cách đây 5 weeks trước46:12

46:12

Docker container vulnerability analysis involves identifying and mitigating security risks within container images. This is done to ensure that containerized applications can be securely deployed. Vulnerability analysis can often be time intensive, which has motivated the use of AI and ML to accelerate the process. NVIDIA Blueprints are reference workflows for agentic and generative AI use cases. One of the most prominent Blueprints is focused on vulnerability analysis for container security . Amanda Saunders is the Director of Enterprise Generative AI Software at NVIDIA, and Allan Enemark works on NVIDIA's Morpheus cybersecurity SDK team. Amanda and Allan join the podcast with Gregor Vand to talk about Blueprints and their application to vulnerability and container security. Gregor Vand is a security-focused technologist, and is the founder and CTO of Mailpass. Previously, Gregor was a CTO across cybersecurity, cyber insurance and general software engineering companies. He has been based in Asia Pacific for almost a decade and can be found via his profile at vand.hk. Please click here to see the transcript of this episode. Sponsorship inquiries: sponsor@softwareengineeringdaily.com…

1
The Raylib C Library for Game Development with Ramon Santamaria 1:00:32

cách đây 5 weeks trước1:00:32

1:00:32

Raylib is a lightweight, beginner-friendly, and open-source C library for game development, known for its simplicity and lack of external dependencies. It's designed to streamline the creation of 2D and 3D games, and has an intuitive API for managing graphics, audio, and input. Ramon Santamaria is the Founder and Lead Developer of Raylib . He joins the show with Joe Nash to talk about the Raylib project. Joe Nash is a developer, educator, and award-winning community builder, who has worked at companies including GitHub, Twilio, Unity, and PayPal. Joe got his start in software development by creating mods and running servers for Garry’s Mod, and game development remains his favorite way to experience and explore new technologies and concepts. Please click here to see the transcript of this episode. Sponsorship inquiries: sponsor@softwareengineeringdaily.com…

1
Anduril with Gokul Subramanian 44:04

cách đây 6 weeks trước44:04

44:04

Anduril is a technology defense company with a focus on drones, computer vision, and other problems related to national security. It is a full-stack company that builds its own hardware and software, which leads to a great many interesting questions about cloud services, engineering workflows, and management. Gokul Subramanian is Senior Vice President of Engineering for Software Programs at Anduril Industries. He joins the show to share his knowledge of the national security problem set, how Anduril operates and what the company has built. Sean's been an academic, startup founder, and Googler. He has published works covering a wide range of topics from AI to quantum computing. Currently, Sean is an AI Entrepreneur in Residence at Confluent where he works on AI strategy and thought leadership. You can connect with Sean on LinkedIn. Please click here to see the transcript of this episode. Sponsorship inquiries: sponsor@softwareengineeringdaily.com…

1
Mamba and Software Package Security with Sylvain Corlay 46:56

cách đây 6 weeks trước46:56

46:56

QuantStack is an open-source technology software company specializing in tools for data science, scientific computing, and visualization. They are known for maintaining vital projects such as Jupyter, the conda-forge package channel, and the Mamba package manager. Sylvain Corlay is the CEO of QuantStack. He joins the podcast to talk about his company, Conda, Mamba, the new Mamba 2.0 release, software package security, and more. Gregor Vand is a security-focused technologist, and is the founder and CTO of Mailpass. Previously, Gregor was a CTO across cybersecurity, cyber insurance and general software engineering companies. He has been based in Asia Pacific for almost a decade and can be found via his profile at vand.hk. Please click here to see the transcript of this episode. Sponsorship inquiries: sponsor@softwareengineeringdaily.com…

Chào mừng bạn đến với Player FM!

Player FM đang quét trang web để tìm các podcast chất lượng cao cho bạn thưởng thức ngay bây giờ. Đây là ứng dụng podcast tốt nhất và hoạt động trên Android, iPhone và web. Đăng ký để đồng bộ các theo dõi trên tất cả thiết bị.