Podcasts

Kim Lewandowski and Michael Lieberman on Securing the Software Supply Chain with SLSA

Charles Humble talks to Kim Lewandowski and Michael Lieberman about the SLSA framework.  They discuss why the software supply chain is under growing attack, explore the key ideas in SLSA and its connection to Google’s Binary Authentication for Borg, and think about how the framework might evolve.

Cyber Security with Maxime Lamothe-Brassard

On this episode of the InfoQ Podcast, Thomas Betts talks with Maxime Lamothe-Brassard about cybersecurity. Understanding security is very similar to understanding software architecture, with general concepts applicable to everyone, and specific needs that depend on your situation. The discussion covers roles and responsibilities, DevSecOps, and the current and future state of cloud-native security

Michelle Brenner Builds Netflix Workstations and Enables Artists to Create From Anywhere

Producing television shows and movies at Netflix-scale means having a way to efficiently work with many artists and content creators. Netflix Workstations were created as a cloud-based solution to provide artists with secure access to the applications and content they need to complete their work. We talk about the benefits and trade-offs of the solution that enables artists to create from anywhere

Mario Platt on DevSecOps, Platforms, and Threat Modelling

In this podcast, Mario Platt, VP head of information security at CloudMargin, sat down with InfoQ podcast co-host Daniel Bryant. Topics discussed included: the differences and similarities between DevSecOp and DevOps; the role of a platform in relation to system security; and the value of threat modelling.

Marty Abbott and Tanya Cordrey on Microservices, Availability, and Managing Risk

In this podcast, Marty Abbott and Tanya Cordrey sat down with InfoQ podcast co-host Daniel Bryant and discussed topics that included: their learning from working together in the early days of eBay, why and how to avoid creating software systems that are composed of deep call chains of microservices, and how to build effective product teams.