When Code No Longer Matters
When AI can translate what we want directly into instructions a chip understands, does human readable code still matter?
Listen to the episodeAll topics
Secure development
AI-generated code, developer guardrails, secure defaults, and software quality.
Is Spec-Driven Development Already Dead
In this episode, we take on spec-driven development, the resurgent idea that writing a detailed spec and letting AI implement it will finally give us the precision engineering promised us since the 1950s.
Listen to the episodeThe Invisible Code Problem: When You Can’t See the Attack, Can You Stop It?
In this episode, we dive into the strange world of invisible Unicode attacks and what they could mean for modern software security.
Listen to the episodeCan AI Replace Security Teams? The Software Quality Debate
Is the cybersecurity industry facing a security problem or a software quality problem?
Listen to the episodeDon’t Forget the Beauty of Simplicity: Exploring Shifts in Software Development
We’re debating the concepts of 'Shift Left' and 'Shift Down' in the world of cybersecurity.
Listen to the episodeVibe Coding: Can You Put Your Trust in the Machine?
We’re discussing vibe coding again and how AI-generated code is reshaping software development.
Listen to the episodeVibe Coding: What Could Possibly Go Wrong?
Vibe coding, or using AI to generate code by describing what you want.
Listen to the episodeThe Illusion of Secure Software
In this episode of The Security Table Podcast, hosts ChriS, Izar and Matt dive into the recent statement by CISA's Jen Easterly on the cybersecurity industry's software quality problem.
Listen to the episodeThe Intersection of Hardware and Software Security
In this episode of The Security Table, Chris, Izar, and Matt discuss an article that discusses threat modeling in the context of hardware.
Listen to the episodeWhy Developers Will Take Charge of Security, Tests in Prod
The script delves into a multifaceted discussion encompassing critiques and praises of book-to-movie adaptations like 'Hitchhiker's Guide to the Galaxy', 'Good Omens', and 'The Chronicles of Narnia'.
Listen to the episodeSQLi All Over Again?
Chris, Matt, and Izar discuss a recent Secure by Design Alert from CISA on eliminating SQL injection (SQLi) vulnerabilities.
Listen to the episodeSecure by Default in the Developer Toolset and DevEx
Matt, Chris, and Izar talk about ensuring security within the developer toolset and the developer experience (DevEx).
Listen to the episodeDebating the Priority and Value of Memory Safety
Chris, Izar, and Matt tackle the first point of the recent White House report, "Back to the Building Blocks: a Path toward Secure and Measurable Software."
Listen to the episodeVillainy, Open Source, and the Software Supply Chain
Matt, Izar, and Chris have a lively discussion about how security experts perceive open-source software.
Listen to the episodeAn SBOM Lifecycle
Aditi Sharma joins Matt, Izar, and Chris around the Security Table to discuss Software Bill of Materials (SBOMs).
Listen to the episodeAn SBOM Fable
Join Chris, Matt, and Izar for a lively conversation about an article that offers 20 points of "essential details" to look for in a Software Bill of Materials (SBOM).
Listen to the episodeShould #AppSec be Part of the Development Team?
The big question is if it's possible to lose the application security team and move all the functions directly into development.
Listen to the episodeReasonable Software Security: Do We Really Need DAST?
In this episode of the Security Table, the gang discusses reasonable software security.
Listen to the episodeThe Final Take on the National Cybersecurity Strategy: Software Liability And Privacy
Chris Romeo, Izar Tarandach, and Matt Coles discuss the national cybersecurity strategy, focusing on pillar three, which aims to shape market forces to drive security and resilience.
Listen to the episodeSoftware bill of materials -- what is it good for?
The gang considers the software bill of materials (SBOM) approach and asks hard questions about what SBOM is for and whether it improves security.
Listen to the episodeShould security give up on developers?
The gang discusses whether security should or could give up on developers.
Listen to the episode