Application Security Weekly Subscribe

Training For Developers – Nicolas Valcárcel – ASW #77

September 23, 2019

Nicolas Valcarcel is the Security Engineer at AdRoll. Nicolas Developers and security professional have vastly different views of the world, so it's not uncommon that trainings created by the later don't fully reach the former. Training for developers should be made with their tools and with their view of the world in mind.

Full Show Notes: https://wiki.securityweekly.com/ASW_Episode77

Full episode and show notes

Guest

Nicholas Valcarcel

Security Engineer at AdRoll

is a Security Engineer at AdRoll. He has over a decade of experience working on the technology industry, including various development, operations and security roles. Nicolas has been involved in multiple early stage Startups and has helped them build the foundation for the engineering teams, as well as successfully design, bootstrap and build security programs.

Hosts

Tech Lead at Block

Senior Engineering Leader at AWS

Chief Product Officer at CyberSaint

Related

Application security

Arg Parsing in Rust, End of Life Hardware, CSRB & MS, Chrome’s V8 Sandbox – ASW #281

April 15, 2024

A Rust advisory highlights the perils of parsing and problems of inconsistent approaches, D-Link (sort of) deals with end of life hardware, CSRB recommends practices and processes for Microsoft, Chrome’s V8 Sandbox increases defense, and more!

Application security

Demystifying Security Engineering Career Tracks – Karan Dwivedi – ASW #281

April 15, 2024

There are as many paths into infosec as there are disciplines within infosec to specialize in. Karan Dwivedi talks about the recent book he and co-author Raaghav Srinivasan wrote about security engineering. There's an appealing future to security taking on engineering roles and creating solutions to problems that orgs face. We talk about the breadt...

Application security

OWASP Breach, Types of Prompt Injection, Device-Bound Sessions, ASVS & APIs – ASW #280

April 8, 2024

OWASP leaks resumes, defining different types of prompt injection, a secure design example in device-bound sessions, turning an ASVS requirement into practice, Ivanti has its 2000s-era Microsoft moment, HTTP/2 CONTINUATION flood, and more!