Shift left, seriously. (Changelog Interviews #575)
This week we're going deep on security and what it takes to shift left, seriously. Adam is joined by Justin Garrison (co-host of Ship It), plus two members of the BoxyHQ team — Deepak Prabhakara, Co-founder & CEO and Schalk Neethling, Community Manager and DevRel as well as fellow Changelog Slack member. We discuss how to shift left, the role of the developer and the burden of security, the importance of tooling, the difference between authentication and authorization, and a mindset change for when security takes place — it's a matter of "when" not "who."
Embed this episode
Chapters
- 0:00 This week on The Changelog
- 1:23 Sponsor: Vercel
- 4:53 Shift left!
- 7:35 Shift lift, no more right?
- 9:22 Too much burden on devs?
- 14:23 There's too much tooling
- 18:42 So, who does security?
- 21:08 Secure defaults
- 26:37 Auth for BoxyHQ
- 29:37 Right vs wrong auth
- 33:54 Sponsor: Synadia
- 38:13 Security as code
- 42:27 Justin's first automation
- 49:02 Tooling to reconcile security
- 55:01 Sponsor: Read Write Own
- 56:22 It's when, not who.
- 59:35 Minimum Viable Security Product
- 1:02:22 I can point to the drive
- 1:03:36 Build vs buy?
- 1:07:39 SaaS Vs boxed software
- 1:10:28 Can you hire for that?
- 1:12:20 Adam loves Pipedrive (btw)
- 1:13:53 We're not doing everything
- 1:18:29 Why is BoxyHQ open source?
- 1:21:00 How to be open and open to contribs?
- 1:22:13 Digging into commits
- 1:23:23 Gaming LOCs
- 1:24:07 Wrapping up
- 1:25:41 Up next
No transcript yet.
Frequently asked questions
How long is this episode of Changelog Master Feed?
This episode is 1 hour and 28 minutes long.
When was this Changelog Master Feed episode published?
This episode was published on January 26, 2024.
Is there a transcript available for this episode?
Yes, a full transcript is available for this episode. You can read the complete transcript on the episode page.
Can I download this Changelog Master Feed episode?
Yes. Use the download control on the episode player to save the publisher-provided media file.