DevSecOps công khai
[search 0]
Thêm

Download the App!

show episodes
 
T
The DevSecOps Talks Podcast

1
The DevSecOps Talks Podcast

Mattias Hemmingsson, Julien Bisconti and Andrey Devyatkin

Unsubscribe
Unsubscribe
Hàng tháng
 
This is the show by and for DevSecOps practitioners who are trying to survive information overload, get through marketing nonsense, do the right technology bets, help their organizations to deliver value, and last but not the least to have some fun. Tune in for talks about technology, ways of working, and news from DevSecOps. This show is not sponsored by any technology vendor and trying to be as unbiased as possible. We talk like no one is listening! For good or bad :) For more info, show n ...
  continue reading
 
Loading …
show series
 
Neste episódio especial, mergulhamos no emocionante mundo da segurança de aplicações e como ela se relaciona com a cultura DevSecOps. Vamos explorar as melhores práticas para garantir a segurança em todas as etapas SDL e como os profissionais de segurança podem trabalhar em colaboração com as equipes de desenvolvimento e operações. Batemos um papo …
  continue reading
 
In this episode, we discuss the evolution of AWS networking capabilities from EC2-classic to VPC and advanced networking features. Andrey highlights that while many companies only use VPC and VPC peerings, there are lesser-known features that can significantly change how we approach networking setups on AWS. Connect with us on LinkedIn or Twitter (…
  continue reading
 
Você é dev? Sabe voar dev? Sabe? Pois é, o estilo capitão nascimento as vezes se faz necessário em meio a cenários tão "sem ordem", onde literalmente o dev é Deus e pode tudo, mas será mesmo que deve ser assim? Devemos confiar nossa segurança, qualidade e outros aspectos na boa vontade do dev? Ou devemos impor da maneira correta como a coisa deve s…
  continue reading
 
This is a mixed bag of an episode, we chat about all sorts of digital tools and security practices that we use in our day-to-day lives. We start by talking about password managers, and why Julien still using LastPass after the recent LastPass data breach. Julien gives us the lowdown on his personal approach to handling passwords and two-factor auth…
  continue reading
 
Julien has extensive experience building data platforms for data engineering, so we got him talking and sharing. If infra for data engineering is your cup of tea, then this episode is for you. Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer your questions, hear suggestions for new episodes or…
  continue reading
 
We discussed tracing before but never got around to explaining details such as fundamentals, terminology, etc. This time Julien goes into detail about what tracing is, what the benefits are, the basic terms you need to understand, and where to start. Great episode for those who are considering adding tracing capabilities to their systems. Connect w…
  continue reading
 
Este episódio serve para mostrar que, sozinho eu toco a parada. Mentira, saudades meninos. Mas, serviu sim para mostrar que segurança em outro nível, não é ir além, mas é fazer o básico bem feito, seguir algum padrão ou metodologia, utilizar ferramentas, implementar processos e acima de tudo, revisar tudo isso e aperfeiçoar de forma contínua.…
  continue reading
 
Voltamos! Em grande estilo, a 5ª série do Gabriel mais ativa do que nunca, o Marcos só pensando em pizza, e o Rodrigo mais ausente que desenvolvedor que sabe fazer código seguro... e o Cássio claro, cheio de sabedoria hehehe. No primeiro episódio da quarta temporada, te ensinamos a literalmente ganhar qualidade, de graça no que diz respeito a conte…
  continue reading
 
We are happy to welcome back Jacob Lärfors, CEO and Senior Consultant from Verifa, to talk about software supply chain attacks. It feels important to raise this topic since those attacks start to be utilized more often by sophisticated adversaries. At the same time, software supply chain security is something that companies often overlook. We as pr…
  continue reading
 
Have you heard any recent news from Docker? We haven't. That is why we decided to check up on Docker to see how it is doing and go through the tool's history and adoption. Clueless about the difference between Docker, Containerd, CRI-O? We got you covered. Also, we will highlight a couple of new handy capabilities added recently. Connect with us on…
  continue reading
 
With a multi-country episode, we invited Rachel Appel (JetBrains) to talk about the psychology behind the softwares. Could they make us follow what they want? What is dark patterns? Am I safe? Let's find out on this very nice episode. PS. Marcos hair is temporary!Bởi Cássio Batista Pereira
  continue reading
 
Vamos comentar alguns incidentes públicos e como poderiam ter sido evitados ou mitigados do ponto de vista de segurança de aplicações. É claro que é mais fácil comentar o que já aconteceu, mas nada como aprender com os erros (mesmo dos outros) e tentar se proteger ainda mais.Bởi Cássio Batista Pereira
  continue reading
 
We are excited about the new breed of tools coming to the market. We often had to put together tools to find out what was in production and what broke it. Your monitoring tools go as far as only telling you that something isn't working as expected but not why it is so, and then you have to scramble to figure out what versions of services are in pro…
  continue reading
 
No décimo segundo e último episódio da série SDL, você acompanha sobre Incident Response Plan. O quê? Como? Onde? Quando? E principalmente, para quem? Vamos mergulhar no tema para te ajudar a desenvolver software seguro, da maneira certa.Bởi Cássio Batista Pereira
  continue reading
 
No décimo episódio da série SDL, você acompanha sobre Dynamic Application Security Testing DAST. O quê? Como? Onde? Quando? E principalmente, para quem? Vamos mergulhar no tema para te ajudar a desenvolver software seguro, da maneira certa.Bởi Cássio Batista Pereira
  continue reading
 
We are discussing what has happened in Terraform world since the 1.0 release last year and if there are new features worth mentioning, trends in Terraform development, etc. As well as doing a recap of the road to 1.0 and how long it took us to get there. Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy …
  continue reading
 
If you follow CloudNative hype wave, you might feel that Prometheus is the must-use monitoring tool for everything CloudNative. Plus, almost everything nowadays has a Prometheus exporter. Just get that helm chart installed, and here you go - metrics question sorted out. Want to monitor endpoints - here is BlackBox exporter for you. Want to get noti…
  continue reading
 
Loading …

Hướng dẫn sử dụng nhanh