Indirect External Access
Explore indirect external access in Linux systems, covering implementation, benefits, and potential challenges for developers and system administrators.
Why is devm_kzalloc() Harmful and What Can We Do About It
Explore the drawbacks of devm_kzalloc() in Linux kernel development and discover alternative approaches for efficient memory management and resource allocation.
Trusting SDKs
Explore the risks of third-party SDKs in iOS development and learn how attackers can inject malicious code into your app. Discover vulnerabilities and protection strategies.
Securing Container Delivery with TUF
Explore TUF's architecture for secure container delivery, protecting against attacks and mitigating risks in software distribution, even after security breaches.
The Common Configuration Scoring System for Kubernetes Security
Explore KCCSS, an open-source framework for assessing Kubernetes workload risks. Learn how it calculates scores, its implementation in kube-scan, and best practices for securing K8s applications.
Uncharted Territories - Discovering Vulnerabilities in Public Helm Charts
Explore vulnerabilities in public Helm Charts, examining security considerations for both Helm as a tool and individual charts. Learn about CNCF's security investments and their impact on Kubernetes ecosystem.
Lessons From Migrating to SPIFFE After 10 Years of Service Identity at Square
Insights from Square's migration to SPIFFE for service identity across environments, covering challenges, community support, risk management, and lessons learned.
Evaluating Business Risk for Open Source Cloud Native Projects
Explore strategies for assessing and mitigating business risks associated with open source cloud native projects, focusing on governance, neutrality, and community factors.
The Hidden Costs - How "Free" Is Kubernetes Really?
Explore hidden costs of Kubernetes adoption, including infrastructure, security, automation, and skill enablement. Learn from real-world experiences to optimize your CaaS implementation.
A Safer Curl - Bash for the Cloud
Learn how to transform risky curl | bash installations into secure one-liners using Porter and Notary, making cloud-native application deployments safer without sacrificing convenience or ease of use.
eBPF & Cillium at Sky
Explore eBPF & Cilium implementation at Sky, covering network security, scalability, and testing strategies for cloud-native environments.
Nightmare Before Best Practices
Horror stories of costly mistakes from overlooking simple best practices in software development. Learn to avoid disastrous consequences and protect your systems.
Deus Ex Scala - Finding a Home for Scala in the Corporate Machine
Exploring Scala's adoption in a high-performance financial exchange environment, discussing technical challenges, team building, and the benefits of using Scala in a risk-averse corporate setting.
Why We Worry About All the Wrong Things
Explore root causes of fear and anxiety, learn to rewrite instincts, and redirect worry towards productive outcomes for a safer, happier, and less stressful life and career.
This Is Not a Talk About Airplane Crashes
Explore aviation safety principles and their application to human-technical systems through fascinating accident case studies and valuable lessons for collaborative work environments.
How Coinbase Rewrote the App in React Native
Coinbase's journey in rewriting their app using React Native, highlighting the transition process, risk mitigation strategies, and valuable lessons learned from the successful launch.
Code Red - The Business Impact of Code Quality
Explore the business impact of code quality, learn to visualize technical debt, quantify its effects, and prioritize improvements for better time-to-market and customer satisfaction.
Warning - Standing Up Too Quickly Can Make You Dizzy
Insights on scaling challenges and strategies to prevent business collapse from industry experts at Collision Conference.
Faster & Less Risky Releases with Feature Flags
Learn how feature flags enable faster, safer software releases by separating deployment from rollout. Discover techniques for opt-in access, beta testing, canary launches, and dark releases to improve development workflows.
Something Something Security
Explore online security risks, vulnerabilities, and organizational unpreparedness with Troy Hunt. Learn from past failures to enhance your systems' protection and safeguard valuable digital assets.
Something Something Cyber
Entertaining exploration of cybersecurity realities, debunking myths and revealing vulnerabilities. Learn from past failures to enhance your online protection strategies.