A successful strategy in appsec is to build platforms with defaults and designs that ease the burden of security choices for developers. But there's an important difference between expecting (or requiring!) developers to use a platform and building a platform that developers embrace. Julia Knecht shares her experience in building platforms with an attention to developer needs, developer experience, and security requirements. She brings attention to the product management skills and feedback loops that make paved roads successful -- as well as the areas where developers may still need or choose their own alternatives. After all, the impact of a paved road isn't in its creation, it's in its adoption.
Julia Knecht leads Security Platforms Engineering at Netflix – SPE builds foundational security products that enable security engineering at Netflix at scale and speed. Julia has spent most of her career specialized in product and application security, and is passionate about building teams and programs that enable the business via secure paved roads, strong environmental insights and excellent security-developer experience.
Mike Shema
John Kinsella
- ffmpeg hand-rolls ASM to improve a 100x performance improvement
ffmpeg is big fans of assembly code - they actually have a "school" github repo to help devs get up to speed. In their latest use of ASM, they've improved a particular function rangedetect8_avx512 by rewriting it in ASM.
Compilers (and other tools) do all sorts of amazing tricks - but still sometimes the human's better.
