On the Importance and Challenges of Reproducible Builds for Software Supply Chain Security
Explore the significance and hurdles of reproducible builds in enhancing software supply chain security, drawing insights from experts across renowned institutions.
VIDEZZO - Dependency-Aware Virtual Device Fuzzing
Explore innovative virtual device fuzzing techniques with VIDEZZO, focusing on dependency-aware strategies to enhance security testing in virtualized environments.
Typing High-Speed Cryptography against Spectre v1
Explore advanced techniques for securing cryptographic implementations against Spectre v1 attacks, focusing on high-speed solutions and type-based defenses.
Solving Hard Problems with Quantum & High-Performance Computing in The Cloud
Explore quantum computing's integration with high-performance computing in the cloud, its applications in chemistry, logistics, and finance, and learn about Kvantify's approach to solving complex industry problems.
One Rule to Rule Them All
Explore the "one rule to rule them all" in software development, focusing on adaptability, intuition-building, and making coding enjoyable while challenging conventional wisdom.
Hide and Seek with Spectres - Efficient Discovery of Speculative Vulnerabilities with Random Testing
Explore efficient techniques for uncovering speculative vulnerabilities using random testing, enhancing cybersecurity against Spectre-like attacks.
SyzDescribe - Principled, Automated, Static Generation of Syscall Descriptions for Kernel Drivers
Automated generation of syscall descriptions for kernel drivers using SyzDescribe, enhancing security testing efficiency and coverage for operating system kernels.
Code Red - The Business Impact of Code Quality
Explore the business impact of code quality, learn to visualize technical debt, and discover strategies to prioritize improvements for enhanced productivity and customer satisfaction.
SDR - Software Defined Radio, eine Einführung
Einführung in Software Defined Radio: Funktionsprinzip, Komponenten und praktischer Einstieg. Erläutert Anwendungsmöglichkeiten, Open-Source-Projekte und rechtliche Aspekte für Einsteiger mit kleinem Budget.
GraphSPD - Graph-Based Security Patch Detection with Enriched Code Semantics
Explore a novel graph-based approach for detecting security patches in software, leveraging enriched code semantics to enhance accuracy and efficiency in vulnerability management.
Gamification, Systems Thinking and the Power of Observability
Explore observability, gamification, and systems thinking in software development. Learn about collaborative tasks, feature flags, and actionable insights for agile deployment and issue resolution.
The Art of Software Development
Explore software development as a blend of art and engineering, challenging traditional views on coding, testing, and architecture while emphasizing the importance of abstraction and continuous learning.
Breaking the Chain - An Attacker's Perspective on Supply Chain Vulnerabilities and Flaws
Explore cloud development vulnerabilities across 5 phases, from IDE to artifacts. Learn attacker strategies and exploitation techniques in this comprehensive supply chain security analysis.
Plain Text
Explore the hidden complexities of plain text in software development, from encoding issues to cultural assumptions, and learn best practices for avoiding text-related bugs.
Five Lines of Code
Discover a systematic approach to refactoring and managing technical debt. Learn practical techniques for improving code quality, reducing complexity, and enhancing maintainability in software projects.
Paving the Road to Effective Software Development
Explore effective software development through autonomous teams, platform engineering, and the "paved road" approach. Learn strategies for balancing team autonomy with organizational control and efficiency.
Dirty Bin Cache - A New Code Injection Poisoning Binary Translation Cache
Uncover a novel code injection vulnerability in Rosetta 2, exploring its impact on Apple Silicon Macs and discussing potential security implications for binary translation caches.
Humane On-call
Explore strategies for implementing and improving on-call practices in SRE and tech roles, emphasizing its importance and offering actionable ideas for more humane and effective 24/7 operations.
Hold My Beer - Load Testing in Production on Autopilot
Discover how automated load testing in production enhances system reliability, developer confidence, and business performance while minimizing risks and human intervention.
LiveMLP - ML Platform for Assisting Contact Center Agents in Real-Time
Explore a real-time ML platform designed to assist contact center agents, addressing challenges in throughput, latency, and fault tolerance while improving customer support efficiency.
Performance Testing in Keptn Using K6
Explore Keptn's integration with K6 for scalable performance testing in delivery pipelines, including SLO evaluation and quality gates for efficient service monitoring and optimization.