Adding Observability With OpenTelemetry - Adriana Villela - ASW #309 Application Security Weekly (Video) podcast

Application Security Weekly (Video)

Application Security Weekly (Video) podcast artwork

Tech News Tech News Applicationsecurityweekly Keithhoodlet Paulasadoorian Sdlcsecurity Technology Video Security Weekly Productions DevOps AppSec asw

Player FM - Internet Radio Done Right

Agregado hace cinco años

Contenido proporcionado por Security Weekly Productions. Todo el contenido del podcast, incluidos episodios, gráficos y descripciones de podcast, lo carga y proporciona directamente Security Weekly Productions o su socio de plataforma de podcast. Si cree que alguien está utilizando su trabajo protegido por derechos de autor sin su permiso, puede seguir el proceso descrito aquí https://es.player.fm/legal.

<

<div class="span index">1</div> <span><a class="" data-remote="true" data-type="html" href="/series/cloud-realities">Cloud Realities</a></span>

<div class="span index">1</div> <span><a class="" data-remote="true" data-type="html" href="/series/cloud-realities">Cloud Realities</a></span> podcast artwork

<div class="span index">1</div> <span><a class="" data-remote="true" data-type="html" href="/series/cloud-realities">Cloud Realities</a></span> podcast artwork

1
Cloud Realities

Cancelar la suscripción

hace 5 díashace 5d ago

Cancelar la suscripción

Semanalmente

Exploring the practical and exciting alternate realities that can be unleashed through cloud driven transformation and cloud native living and working. Each episode, our hosts Dave, Esmee & Rob talk to Cloud leaders and practitioners to understand how previously untapped business value can be released, how to deal with the challenges and risks that come with bold ventures and how does human experience factor into all of this? They cover Intelligent Industry, Customer Experience, Sustainability, AI, Data and Insight, Cyber, Cost, Leadership, Talent and, of course, Tech. Together, Dave, Esmee & Rob have over 80 years of cloud and transformation experience and act as our guides though a new reality each week. Web - https://www.capgemini.com/insights/research-library/cloud-realities-podcast/ Email - Podcasts.cor@capgemini.com

Application Security Weekly (Video) « »
Adding Observability with OpenTelemetry - Adriana Villela - ASW #309

hace un año 34:24

Compartir

MP4•Episodio en casa

Contenido proporcionado por Security Weekly Productions. Todo el contenido del podcast, incluidos episodios, gráficos y descripciones de podcast, lo carga y proporciona directamente Security Weekly Productions o su socio de plataforma de podcast. Si cree que alguien está utilizando su trabajo protegido por derechos de autor sin su permiso, puede seguir el proceso descrito aquí https://es.player.fm/legal.

Observability is a lot more than just sprinkling printf statements throughout a code base. Adriana Villela explains principles behind logging, traceability, and metrics and how the OpenTelemetry project helps developers gather this useful information. She also provides suggestions on starting logging from scratch, how to avoid information overload, and how engaging users about their experience with solutions like OpenTelemetry makes for better software -- a lesson that appsec teams can apply to paved roads and security guardrails.

Segment Resources:

Show Notes: https://securityweekly.com/asw-309

… continue reading

651 episodios

#Tech #News #Tech News #Applicationsecurityweekly #Keithhoodlet #Paulasadoorian #Sdlcsecurity #Technology #Video #Security Weekly Productions #DevOps #AppSec #asw

Application Security Weekly (Video)

Application Security Weekly (Video) podcast artwork

Adding Observability with OpenTelemetry - Adriana Villela - ASW #309

Application Security Weekly (Video)

published hace un año

Compartir

MP4•Episodio en casa

Contenido proporcionado por Security Weekly Productions. Todo el contenido del podcast, incluidos episodios, gráficos y descripciones de podcast, lo carga y proporciona directamente Security Weekly Productions o su socio de plataforma de podcast. Si cree que alguien está utilizando su trabajo protegido por derechos de autor sin su permiso, puede seguir el proceso descrito aquí https://es.player.fm/legal.

Observability is a lot more than just sprinkling printf statements throughout a code base. Adriana Villela explains principles behind logging, traceability, and metrics and how the OpenTelemetry project helps developers gather this useful information. She also provides suggestions on starting logging from scratch, how to avoid information overload, and how engaging users about their experience with solutions like OpenTelemetry makes for better software -- a lesson that appsec teams can apply to paved roads and security guardrails.

Segment Resources:

Show Notes: https://securityweekly.com/asw-309

… continue reading

651 episodios

#Tech #News #Tech News #Applicationsecurityweekly #Keithhoodlet #Paulasadoorian #Sdlcsecurity #Technology #Video #Security Weekly Productions #DevOps #AppSec #asw

Усі епізоди

×

A

Application Security Weekly (Video)

Application Security Weekly (Video) podcast artwork

1
Avoiding Appsec's Worst Practices - ASW #324 1:11:19

hace 7 días1:11:19

Reproducir más Tarde

Reproducir más Tarde

1:11:19

We take advantage of April Fools to look at some of appsec's myths, mistakes, and behaviors that lead to bad practices. It's easy to get trapped in a status quo of chasing CVEs or discussing which direction to shift security. But scrutinizing decimal points in CVSS scores or rearranging tools misses the opportunity for more strategic thinking. We satirize some worst practices in order to have a more serious discussion about a future where more software is based on secure designs. Segment resources: https://bsidessf2025.sched.com/event/1x8ST/secure-designs-ux-dragons-vuln-dungeons-application-security-weekly https://bsidessf2025.sched.com/event/1x8TU/preparing-for-dragons-dont-sharpen-swords-set-traps-gather-supplies https://www.rfc-editor.org/rfc/rfc3514.html https://www.rfc-editor.org/rfc/rfc1149.html Show Notes: https://securityweekly.com/asw-324…

A

Application Security Weekly (Video)

Application Security Weekly (Video) podcast artwork

1
Finding a Use for GenAI in AppSec - Keith Hoodlet - ASW #323 54:08

hace 14 días54:08

Reproducir más Tarde

Reproducir más Tarde

54:08

LLMs are helping devs write code, but is it secure code? How are LLMs helping appsec teams? Keith Hoodlet returns to talk about where he's seen value from genAI, where it fits in with tools like source code analysis and fuzzers, and where its limitations mean we'll be relying on humans for a while. Those limitations don't mean appsec should dismiss LLMs as a tool. It means appsec should understand how things like context windows might limit a tool's security analysis to a few files, leaving a security architecture review to humans. Segment resources: https://securing.dev/posts/ai-security-reasoning-and-bias/ https://seclists.org/dailydave/2025/q1/0 https://arxiv.org/pdf/2409.16165 https://arxiv.org/pdf/2410.05229 https://nicholas.carlini.com/writing/2025/thoughts-on-future-ai.html Show Notes: https://securityweekly.com/asw-323…

A

Application Security Weekly (Video)

Application Security Weekly (Video) podcast artwork

1
Redlining the Smart Contract Top 10 - Shashank - ASW #322 53:01

hace 21 días53:01

Reproducir más Tarde

Reproducir más Tarde

53:01

The crypto world is rife with smart contracts that have been outsmarted by attackers, with consequences in the millions of dollars (and more!). Shashank shares his research into scanning contracts for flaws, how the classes of contract flaws have changed in the last few years, and how optimistic we can be about the future of this space. Segment Resources: https://scs.owasp.org https://scs.owasp.org/sctop10/ https://solidityscan.com/web3hackhub https://www.web3isgoinggreat.com Show Notes: https://securityweekly.com/asw-322…

A

Application Security Weekly (Video)

Application Security Weekly (Video) podcast artwork

1
Skype Hangs Up, Android Backdoors, Jailbreak Research, Pretend AirTags, Wallbleed - ASW #321 33:17

hace 28 días33:17

Reproducir más Tarde

Reproducir más Tarde

33:17

Skype hangs up for good, over a million cheap Android devices may be backdoored, parallels between jailbreak research and XSS, impersonating AirTags, network reconnaissance via a memory disclosure vuln in the GFW, and more! Show Notes: https://securityweekly.com/asw-321

A

Application Security Weekly (Video)

Application Security Weekly (Video) podcast artwork

1
CISA's Secure by Design Principles, Pledge, and Progress - Jack Cable - ASW #321 40:34

hace 28 días40:34

Reproducir más Tarde

Reproducir más Tarde

40:34

Just three months into 2025 and we already have several hundred CVEs for XSS and SQL injection. Appsec has known about these vulns since the late 90s. Common defenses have been known since the early 2000s. Jack Cable talks about CISA's Secure by Design principles and how they're trying to refocus businesses on addressing vuln classes and prioritizing software quality -- with security one of those important dimensions of quality. Segment Resources: https://www.cisa.gov/securebydesign https://www.cisa.gov/securebydesign/pledge https://www.cisa.gov/resources-tools/resources/product-security-bad-practices https://www.lawfaremedia.org/projects-series/reviews-essays/security-by-design https://corridor.dev Show Notes: https://securityweekly.com/asw-321…

A

Application Security Weekly (Video)

Application Security Weekly (Video) podcast artwork

1
QR Codes Replacing SMS, MS Pulls VSCode Extension, Threat Modeling, Bybit Hack - ASW #320 33:55

hace 5 weeks33:55

Reproducir más Tarde

Reproducir más Tarde

33:55

Google replacing SMS with QR codes for authentication, MS pulls a VSCode extension due to red flags, threat modeling with TRAIL, threat modeling the Bybit hack, malicious models and malicious AMIs, and more! Show Notes: https://securityweekly.com/asw-320

A

Application Security Weekly (Video)

Application Security Weekly (Video) podcast artwork

1
Keeping Curl Successful and Secure Over the Decades - Daniel Stenberg - ASW #320 35:08

hace 5 weeks35:08

Reproducir más Tarde

Reproducir más Tarde

35:08

Curl and libcurl are everywhere. Not only has the project maintained success for almost three decades now, but it's done that while being written in C. Daniel Stenberg talks about the challenges in dealing with appsec, the design philosophies that keep it secure, and fostering a community to create one of the most recognizable open source projects in the world. Segment Resources: https://daniel.haxx.se/blog/2025/01/23/cvss-is-dead-to-us/ https://daniel.haxx.se/blog/2024/01/02/the-i-in-llm-stands-for-intelligence/ https://thenewstack.io/curls-daniel-stenberg-on-securing-180000-lines-of-c-code/ Show Notes: https://securityweekly.com/asw-320…

A

Application Security Weekly (Video)

Application Security Weekly (Video) podcast artwork

1
Regex DoS, LLM Backdoors, Secure AI Architectures, Rust Survey - ASW #319 36:26

hace 6 weeks36:26

Reproducir más Tarde

Reproducir más Tarde

36:26

Applying forgivable vs. unforgivable criteria to reDoS vulns, what backdoors in LLMs mean for trust in building software, considering some secure AI architectures to minimize prompt injection impact, developer reactions to Rust, and more! Show Notes: https://securityweekly.com/asw-319

A

Application Security Weekly (Video)

Application Security Weekly (Video) podcast artwork

1
Developer Environments, Developer Experience, and Security - Dan Moore - ASW #319 33:56

hace 6 weeks33:56

Reproducir más Tarde

Reproducir más Tarde

33:56

Minimizing latency, increasing performance, and reducing compile times are just a part of what makes a development environment better. Throw in useful tests and some useful security tools and you have an even better environment. Dan Moore talks about what motivates some developers to prefer a "local first" approach as we walk through what all of this means for security. Show Notes: https://securityweekly.com/asw-319…

A

Application Security Weekly (Video)

Application Security Weekly (Video) podcast artwork

1
Top 10 Web Hacking Techniques of 2024 - James Kettle - ASW #318 44:57

hace 7 weeks44:57

Reproducir más Tarde

Reproducir más Tarde

44:57

We're getting close to two full decades of celebrating web hacking techniques. James Kettle shares which was his favorite, why the list is important to the web hacking community, and what inspires the kind of research that makes it onto the list. We discuss why we keep seeing eternal flaws like XSS and SQL injection making these lists year after year and how clever research is still finding new attack surfaces in old technologies. But there's a lot of new web technology still to be examined, from HTTP/2 and HTTP/3 to WebAssembly. Segment Resources: Top 10, 2024: https://portswigger.net/research/top-10-web-hacking-techniques-of-2024 Full nomination list: https://portswigger.net/research/top-10-web-hacking-techniques-of-2024-nominations-open Project overview: https://portswigger.net/research/top-10-web-hacking-techniques Show Notes: https://securityweekly.com/asw-318…

A

Application Security Weekly (Video)

Application Security Weekly (Video) podcast artwork

1
Unforgivable Vulns, DeepSeek iOS App Security Flaws, Memory Safety Standards - ASW #317 35:52

hace 8 weeks35:52

Reproducir más Tarde

Reproducir más Tarde

35:52

Identifying and eradicating unforgivable vulns, an unforgivable flaw (and a few others) in DeepSeek's iOS app, academics and industry looking to standardize principles and practices for memory safety, and more! Show Notes: https://securityweekly.com/asw-317

A

Application Security Weekly (Video)

Application Security Weekly (Video) podcast artwork

1
Code Scanning That Works With Your Code - Scott Norberg - ASW #317 37:01

hace 8 weeks37:01

Reproducir más Tarde

Reproducir más Tarde

37:01

Code scanning is one of the oldest appsec practices. In many cases, simple grep patterns and some fancy regular expressions are enough to find many of the obvious software mistakes. Scott Norberg shares his experience with encountering code scanners that didn't find the .NET vuln classes he needed to find and why that led him to creating a scanner from scratch. We talk about some challenges in testing tools, making smart investments in engineering time, and why working with .NET's compiler made his decisions easier. Segment Resources: - https://github.com/ScottNorberg-NCG/CodeSheriff.NET Show Notes: https://securityweekly.com/asw-317…

A

Application Security Weekly (Video)

Application Security Weekly (Video) podcast artwork

1
New SLAP & FLOP Attacks, OCSP Fades Away, DeepSeek's ClickHouse, OAuth 2.0 Security - ASW #316 34:47

hace 9 weeks34:47

Reproducir más Tarde

Reproducir más Tarde

34:47

Speculative data flow attacks demonstrated against Apple chips with SLAP and FLOP, the design and implementation choices that led to OCSP's demise, an appsec angle on AI, updating the threat model and recommendations for implementing OAuth 2.0, and more! Show Notes: https://securityweekly.com/asw-316…

A

Application Security Weekly (Video)

Application Security Weekly (Video) podcast artwork

1
Threat Modeling That Helps the Business - Sandy Carielli, Akira Brand - ASW #316 36:54

hace 9 weeks36:54

Reproducir más Tarde

Reproducir más Tarde

36:54

Threat modeling has been in the appsec toolbox for decades. But it hasn't always been used and it hasn't always been useful. Sandy Carielli shares what she's learned from talking to orgs about what's been successful, and what's failed, when they've approached this practice. Akira Brand joins to talk about her direct experience with building threat models with developers. Show Notes: https://securityweekly.com/asw-316…

A

Application Security Weekly (Video)

Application Security Weekly (Video) podcast artwork

1
Opengrep & Semgrep, Hacking Subarus, Hacking Synths, Stealing Cookies, and RANsacked - ASW #315 34:57

hace 10 weeks34:57

Reproducir más Tarde

Reproducir más Tarde

34:57

An open source security project forks in response to license changes (and an echo of how we've been here before), car hacking via spectacularly insecure web apps, hacking a synth via spectacularly cool MIDI messages, cookie parsing problems, the RANsacked paper of 100+ LTE/5G vulns found from fuzzing, and more! Show Notes: https://securityweekly.com/asw-315…

Bienvenido a Player FM!

Player FM está escaneando la web en busca de podcasts de alta calidad para que los disfrutes en este momento. Es la mejor aplicación de podcast y funciona en Android, iPhone y la web. Regístrate para sincronizar suscripciones a través de dispositivos.

Escucha más de 500 temas

Escucha este programa mientras exploras