Modern software is complex due to large codebases, external dependencies, changing requirements, and distributed teams.
Real-world examples show how simple mistakes, phishing attacks, and incorrect assumptions can cause major system failures.
Over-provisioning, under-provisioning, and failing to anticipate user load can lead to costly outages and poor performance.
The "Gangnam Style" integer overflow illustrates why developers must consider data type limits and long-term system behavior.
A live demo shows how to use a tool like Trivy to automatically scan infrastructure-as-code files for exposed credentials.
Tools like Trivy and Checkov can automatically scan package manifests and configuration files for known vulnerabilities and security issues.
A demonstration of ESLint shows how linters can identify common programming mistakes like scope errors or missing break statements.
Automated tools are helpful but cannot replace the critical thinking and context provided by manual code reviews and comprehensive testing.
The discovery of the XZ Utils backdoor highlights that human intuition and detailed investigation remain essential for finding sophisticated threats.
Hubert Burda Media
München, Germany
ROSEN Technology and Research Center GmbH
Lingen (Ems), Germany
27:36Tino Sokic
26:18Arto Liukkonen
29:50Kevin Lewis
43:00Luka Kladaric
24:31Daniel Tao
31:54François Martin
41:06Lars Gentsch
24:47Adrian Mouat
Jobs that call for the skills explored in this talk.
Remote World
Kaluza Ltd.
Charing Cross, United Kingdom
D-Wave Quantum Inc.
Portland, United States of America
Escape Technologies
Paris, France
Amazon.com, Inc.
Cupertino, United States of America
