Don't Trust Anything - Real-world Uses For WebAssembly
Explore WebAssembly's real-world applications beyond browsers, focusing on secure execution of untrusted code. Learn about WASI, sandboxing techniques, and case studies from Shopify and Mozilla Firefox.
How Flow Works and Other Curiosities
Explore the science behind software engineering practices, value streams, and flow optimization using insights from information theory and complexity science to improve development processes.
Navigating Through Programming's Greatest Mistakes
Explore programming's biggest blunders and their impact on the industry. Delve into FinTech challenges, JavaScript's role, package manager drawbacks, and how coding decisions influence business outcomes.
Living on the Edge
Explore edge computing's potential, tools, and applications. Learn about increasing availability, adoption, and ways to incorporate edge technology into your software projects.
Building Modern Web Applications with Remix-Run
Explore Remix: a full-stack React framework embracing web standards and progressive enhancement. Learn key features, benefits, and how it combines server-side advantages with SPA user experience.
Cloud Native Spring in Action
Explore cloud native Spring development, covering microservices, resilience, Kubernetes deployment, and GitOps. Learn best practices for building and managing modern, scalable applications in the cloud.
Intro to Roc and Innovation in Functional Programming
Explore Roc, a new functional programming language, with experts discussing its innovative features, design principles, and potential impact on the programming ecosystem.
BingBang - Hacking Bing.com with Azure Active Directory
Discover a novel technique for identifying Azure Active Directory misconfigurations, exposing vulnerabilities in cloud-managed environments and their potential impact on major platforms like Bing.com.
OCaml for Fun & Profit - An Experience Report
Explore OCaml's practical applications in real-world systems, covering engineering design, trade-offs, innovation budgeting, and non-technical aspects crucial for project success. Gain insights from hands-on experience in OCaml development.
Continuous Integration - That’s Not What They Meant
Explore trunk-based development for faster, lower-risk deployments. Learn practical tips, benefits, and expert insights to enhance continuous integration and improve your development workflow.
So Long, Secure Coding - Shifting from Syntax to Secure Software Development Processes
Explore shifting from secure coding to holistic secure software development processes. Learn practical actions for enhancing security throughout the SDLC, from design to support, for more robust and resilient systems.
One Rule to Rule Them All
Explore the "one rule to rule them all" in software development, focusing on adaptability, intuition-building, and making code easier to change for long-term success.
Endoscope - Unpacking Android Apps with VM-Based Obfuscation
Explore techniques for unpacking Android apps with VM-based obfuscation, focusing on code virtualization challenges and reverse-engineering methods for mobile app security analysis.
Keep Your Dependencies in Check
Explore tools and strategies for managing software dependencies, from package managers to automated bots, to keep your applications secure and up-to-date while delivering business value.
Uncovering Azure's Silent Threats - A Journey into Cloud Vulnerabilities
Explore security vulnerabilities in Azure ML, uncovering potential threats in cloud-based machine learning platforms and discussing implications for AI/ML system adoption.
Identifying and Reducing Permission Explosion in AWS - A Graph-Based and Analytical Approach
Explore a graph-based approach to identify and mitigate permission explosion in AWS, enhancing cloud security and reducing potential risks in complex infrastructures.
Driving BEAM Adoption with Phoenix LiveView
Explore Phoenix LiveView's latest features driving BEAM adoption. Learn about security, state recovery, file uploads, code organization, and JavaScript integration in this comprehensive web development framework overview.
When a Zero Day and Access Keys Collide in the Cloud - Responding to the SugarCRM 0-Day Vulnerability
Explore AWS environment attacks using MITRE ATT&CK, learn prevention strategies, and understand the complexities of cloud security through the lens of the SugarCRM 0-day vulnerability.
Java, Code Coverage & Their Best Friend - Bytecode - Scandals, Intrigues, Investigations
Dive into bytecode pattern matching, exploring compiler transformations and JaCoCo's implementation for Java code coverage. Learn about filtering compiler-generated artifacts for accurate results.
NPM and Sigstore - Provenance Comes to the World's Largest OSS Ecosystem
Explore GitHub's efforts to secure the Javascript ecosystem through provenance integration and Sigstore partnership, enhancing npm's security against malware and supply chain attacks.
Tips, Tricks and Gotchas When Writing Unit Tests with Mockito
Discover best practices for Mockito unit testing in Java, avoiding common pitfalls and creating maintainable tests with expert insights on mocking and Spring Boot integration.