The Sourcegraph Podcast

Making security more accessible for developers, with Sam Scott, co-founder and CTO of Oso

Oct 12, 2021

01:27:57

Highlights

AI Chapters

Episode notes

Application Layer Security

02:31

Is There a Complexity in the Operationalization of Cryptography?

02:53

The Proper Places to Enforce Off Policy

03:26

Introduction

2min

How Did You Get Into Computer Security?

2min

Ayu E or Os, Did You Fall Into Maths After Graduation?

2min

How Did Cryptography Come About?

3min

I Was a Mad Elf. My Thesis Was an Absolute Mess.

2min

Oso - What Was the Path From Research to Industry?

3min

Is There a Complexity in the Operationalization of Cryptography?

3min

Application Layer Security

3min

How Did You Get Into This Problem?

3min

10.

What Sort of Pain Points Do You Have?

2min

11.

Is There a Ten Minute Primer on Permissions?

6min

12.

The Proper Places to Enforce Off Policy

3min

13.

Is Your Data Access Layer Duplicate?

3min

14.

Is There a Clean, Abstract Authorization Model?

2min

15.

Do You See a Lot of People Combining Enforcement Layers?

3min

16.

Do You Start With the Decision Side?

2min

17.

Code Host Permissions Models

3min

18.

Is There an Authorization Model for a Repository?

3min

19.

The Third Thing You Can Declare Inside This Resource Block

2min

20.

Logic Programming - Is This Really a Conditional Syntax?

2min

21.

How to Write Repository Public or Private Repository?

2min

22.

JavaScript

2min

23.

We've Got a Reputation Model, Right?

3min

24.

A Relationship Is Like a Relationship

2min

25.

A, You Know, I Can't Think of a Use Case Where, Like, You Want to Say What Someone Could Do on That Repository

3min

26.

Getting a Clon in a Dot Dev Club?

2min

27.

Oso to Authorize a Repository

3min

28.

Is There a Way to Make a Repository Public?

3min

29.

Is There a Way to Check if an Authorization Was Applyed?

3min

30.

I've Been Staring at Code for a Long Time.

3min

31.

The Unit, the End to End Here, Right?

3min

32.

Is It All Open Source?

2min

33.

Cloud Is the Future

3min

34.

Open Source and the Open Source Community

2min

How do you make security, a topic that often requires a PhD to understand, accessible to your average developer? In this episode of the Sourcegraph Podcast, Sam Scott, co-founder and CTO of Oso, a batteries-included library for building authorization into your application, comes on the podcast to explain to Beyang Liu, CTO at Sourcegraph, his vision for the future of security development. Along the way, Sam also shares how he got started in cryptography, explains why they pivoted Oso from infrastructure to application authorization, and shows Beyang how you can use Oso to build an authorization model with just 26 lines of code.

Show notes & transcript: https://about.sourcegraph.com/podcast/sam-scott/

Sourcegraph: about.sourcegraph.com

Remember Everything You Learn from Podcasts

Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.

Get the app