Application Security Weekly Subscribe

Training For Developers – Nicolas Valcárcel – ASW #77

September 23, 2019

Nicolas Valcarcel is the Security Engineer at AdRoll. Nicolas Developers and security professional have vastly different views of the world, so it's not uncommon that trainings created by the later don't fully reach the former. Training for developers should be made with their tools and with their view of the world in mind.

Full Show Notes: https://wiki.securityweekly.com/ASW_Episode77

Full episode and show notes

Guest

Nicholas Valcarcel

Security Engineer at AdRoll

is a Security Engineer at AdRoll. He has over a decade of experience working on the technology industry, including various development, operations and security roles. Nicolas has been involved in multiple early stage Startups and has helped them build the foundation for the engineering teams, as well as successfully design, bootstrap and build security programs.

Hosts

Tech Lead at Block

Senior Engineering Leader at AWS

Chief Product Officer at CyberSaint

Related

Application security

Microsoft Recall’s Security & Privacy, Hacking Web APIs, Secure Design Pledge – ASW #288

June 10, 2024

Looking at use cases and abuse cases of Microsoft's Recall feature, examples of hacking web APIs, CISA's secure design pledge, what we look for in CVEs, a nod to PHP's history, and more!

Application security

Random Problems, Protecting Packages, and Vulns in Designs, Defaults & Data Leaks – ASW #283

April 29, 2024

Misusing random numbers, protecting platforms for code repos and package repos, vulns that teach us about designs and defaults, and more!

Application security

Arg Parsing in Rust, End of Life Hardware, CSRB & MS, Chrome’s V8 Sandbox – ASW #281

April 15, 2024

A Rust advisory highlights the perils of parsing and problems of inconsistent approaches, D-Link (sort of) deals with end of life hardware, CSRB recommends practices and processes for Microsoft, Chrome’s V8 Sandbox increases defense, and more!