The Changelog: Software Development, Open Source Shift left, seriously. (Interview)
Jan 26, 2024
Join Justin Garrison, a security and DevOps expert, Deepak Prabhakara, co-founder of BoxyHQ, and Schalk Neethling, Community Manager at BoxyHQ, as they dive into the critical topic of shifting left in software security. They discuss how developers can take ownership of security early in the development process and the vital differences between authentication and authorization. The conversation highlights the importance of modern tooling, fostering a security-aware culture, and adapting to evolving software landscapes for more secure applications.
AI Snips
Chapters
Books
Transcript
Episode notes
Shift Left Definition
- Shifting left means moving responsibility closer to developers.
- It applies to security, testing, and operations.
Ease Developer Burden
- Use tools like Socket.dev to ease the burden of security on developers.
- Don't expect developers to inspect every dependency.
MongoDB Security
- MongoDB's default setting of no authentication led to many security breaches.
- Default settings are crucial for security.
