stackcon2024 | How to hack and defend (your) open source by Roman Zhukov
Get 25% off your ticket with the code YOUTUBE25 – experience the talks live at stackconf.eu!
Would you like to take some practical insights from the leading company that’s in world Top 4 Open-source contributors list? There are no longer questions like “How often I reuse 3rd party tool or library in my day-to-day work?” Answer is clear – always: pypi, npm, etc. Sometimes you don’t even realize that because it’s natural, isn’t it? Let’s talk about common and unusual (may be hidden from public, but still interesting) technics of compromising your company’s assets in minutes because of unlimited power of today’s open source realm. I’ll share examples (you can use right away) of the most useful frameworks and tools that we utilize and that really helps even if you don’t have army of Security professional and your budget is tight. That also helps to tackle things from the “native developer environment” prospective. Usually, SW developers can find whether academic information (like tons of standards) or scattered data about how to consume 3rd parties securely and include essential security stuff to CI/CD pipeline. I know that it’s scary and doesn’t make sense, because I worked a lot with SMB and startups. That’s why besides “defend” part we’ll also address “hack part” to convince where the “actual” risk lives. Zero commercial or promotions – only practical cases, reals scenarios and the best tools.
NETWAYS
Konferenzen: https://www.netways.de/events
Schulungen: https://www.netways.de/schulungen
Shop: https://shop.netways.de/
Blog: http://blog.netways.de/
NWS: https://nws.netways.de
Webinare
Archiv Link: https://www.netways.de/webinare/archi...
Aktuell: https://www.netways.de/wb
Social Media
SlideShare: http://de.slideshare.net/netways
YouTube: https://www.netways.de/youtube
Facebook: / netways
X: / netwaysevents
Instagram: / netwaysgmbh
Gemafreie Musik von www.frametraxx.de