Perfect Sandboxing in Bazel - Enforcing Host Filesystem Dependencies
Discover how to achieve perfect sandboxing in Bazel by encoding and enforcing host filesystem dependencies, with practical insights from migrating a 20-year-old codebase and implementing enhanced dependency management.
Spotify's Journey to Releasing One of the World's Largest Apps with Bazel
Discover how Spotify successfully migrated their massive Android Music app from Gradle to Bazel, exploring technical challenges, hybrid build solutions, and performance optimizations.
Symbolic Macros and Rule Finalizers in Bazel Build System
Discover how symbolic macros enhance code structure with rule-like capabilities, typed attributes, and dependencies, plus learn about rule finalizers for advanced package loading control.
Interoperating Bazel and Other Build Systems - Migrating Complex Codebases
Discover how MongoDB successfully migrated multiple codebases to Bazel build system while maintaining interoperability, focusing on handling complex configurations and ensuring smooth transitions across development platforms.
Bazel Query Deep Dive: From Basics to Advanced Use Cases
Master advanced Bazel querying techniques, from basic commands to complex use cases, enhancing your build debugging skills and workflow optimization capabilities.
Rules Lint: Formatting and Linting All Languages
Discover how to streamline code formatting and linting across multiple programming languages using rules_lint, enabling consistent workflows and efficient static analysis integration.
Pigweed and Bazel for Embedded Development - Building Microcontroller Firmware
Discover how Pigweed and Bazel work together to enhance embedded firmware development, focusing on multi-core builds, flasher scripts, and platform-specific implementations.
Hunting for macOS Application Logic Bugs - Local Privilege Escalation Vulnerabilities
Discover critical macOS security vulnerabilities and privilege escalation bugs affecting major software products, with practical exploitation techniques and defensive strategies for improved visibility.
SRE Not Sorry - Finding Balance Between Operations and Development
Discover practical insights on balancing DevOps complexity with operational efficiency, avoiding over-engineering while maintaining developer engagement and architectural simplicity.
Git Commit Spoofing in Open Source - Understanding and Preventing Repository Attacks
Uncover the truth about Git commit spoofing attacks, their deceptive nature, and essential protective measures to safeguard your repositories from sophisticated security threats.
Empowering Developers to Embrace Security
Discover how to foster collaboration between security and development teams, enabling developers to make secure decisions from the start and build more robust applications.
Operations Love CI/CD - Improving Developer Experience in Pull Request Reviews
Discover practical strategies to optimize pull request reviews, reduce development bottlenecks, and streamline your CI/CD pipeline based on insights from 5M+ pull requests and 30K+ developers.
Unorthodox Vectors for Cloud Attacks: Understanding CI/CD Security Risks
Explore modern cloud security challenges, focusing on CI/CD vulnerabilities and supply chain attacks rather than traditional security vectors. Learn preventive measures and emerging threat patterns.
A Day in the Life of a Base Image - Evolution of Vulnerabilities in Popular Containers
Explore container security evolution through data-driven analysis of popular DevOps images, vulnerability scanning challenges, and practical solutions for maintaining secure development workflows.
Supercharge Your Development with AWS Generative AI Developer Tools
Discover how AWS's generative AI tools like Amazon Q and CodeWhisperer enhance developer productivity, automate routine tasks, and foster innovation in software development.
Building a Secure CI/CD Pipeline - Beyond Security Tools Integration
Discover effective strategies for optimizing security tools in CI/CD pipelines, moving beyond basic implementation to achieve meaningful security improvements and practical outcomes.
Security By Design
Discover essential principles and practices of integrating security throughout the software development lifecycle with guidance from security expert Ana Oprea.
Fuzzing USB With Raw Gadget
Discover how to effectively fuzz USB drivers using Raw Gadget, exploring techniques for finding and exploiting vulnerabilities in USB device drivers through practical demonstrations.
DevSecOps Culture
Discover essential strategies for integrating security into DevOps practices, fostering collaboration between development and security teams for more robust software delivery pipelines.
ELECTRONizing MacOS Privacy - A New Weapon in Red Teaming Armory
Discover how to bypass MacOS privacy controls through Electron apps, exploring TCC vulnerabilities and gaining insights into red teaming techniques for enhanced security testing and defense strategies.
Exploiting Security Vulnerabilities in Microhard Radio Equipment
Uncover critical security vulnerabilities in Microhard's radio equipment, including command injections and buffer overflows, while exploring implications for SCADA and utility systems.