Software Security öffentlich
[search 0]
Mehr
Download the App!
show episodes
 
Artwork

1
Security-Insider

Peter Schmitz

icon
Unsubscribe
icon
icon
Unsubscribe
icon
Monatlich
 
Der Security-Insider Podcast ist ein Podcast für Security-Profis mit Infos, Nachrichten und Meinungen rund um die IT-Sicherheit. Hier unterhält sich Chefredakteur Peter Schmitz mit seinem Co-Host Dirk Srocke und manchmal auch mit spannenden Gästen. Zum Gespräch stehen alle Themen rund um die IT-Sicherheit, Datenschutz und Compliance.
  continue reading
 
Artwork

1
Working Draft

Vanessa Otto, Peter Kröner, Hans Christian Reinl, Stefan Baumgartner, Christian »Schepp« Schaefer

icon
Unsubscribe
icon
icon
Unsubscribe
icon
Wöchentlich
 
Working Draft ist der deutschsprachige Podcast für Frontend-Entwicklung, Webdesign und UI Engineering. Bei uns geht’s um HTML, CSS, JavaScript, Frameworks wie React, Vue und Angular, Responsive Webdesign, User-Interfaces, moderne UI-Patterns, Barrierefreiheit, Tooling, Design-Systeme, Webstandards und mehr. Unser Team besteht aus erfahrenen Frontend-Entwickler:innen aus Deutschland und Österreich – mit Gästen aus der Praxis, die regelmäßig Einblicke in aktuelle Tech-Themen geben. Ob neue CSS ...
  continue reading
 
Artwork
 
Nordh Executive Search ist eine unabhängige und inhabergeführte Personalberatung, die sich auf die Besetzung von Fach- und Führungspositionen im Bereich IT – mit folgenden Schwerpunkten spezialisiert hat: Cyber Security, KI, Data Analytics / Big Data, Cloud Lösungen, Storage, Startups und Software Development.
  continue reading
 
Die programmier.bar lädt regelmäßig spannende Gäste aus der Welt der App- und Webentwicklung zum Gespräch ein. Es geht um neue Technologien, unsere liebsten Tools und unsere Erfahrungen aus dem Entwickler-Alltag mit all seinen Problemen und Lösungswegen. Euer Input ist uns wichtig! Schreibt uns eure Themenwünsche und Feedback per Mail an [email protected] oder auf Discord (https://discord.gg/SvkGpjxSMe), LinkedIn (@programmier.bar), Bluesky (@programmier.bar), Instagram (@programmier.b ...
  continue reading
 
Artwork

1
One More Level

One More Level

icon
Unsubscribe
icon
icon
Unsubscribe
icon
Monatlich
 
Du liebst Games? Wir lieben Games. Im One-More-Level-Podcast quatschen wir über unser gemeinsames Hobby. Wer sind wir? Wir sind eine bunte Truppe aus Game-Redaktor, Software-Entwickler, IT-Security-Experte und Werber. Egal ob Shooter, Rollenspiel oder Adventure, wir Plauschgamer sind uns für nichts zu schade. Also hör rein, wenn wir unseren Senf zum Besten geben. Unser Motto: Spiele spielen und schwäze.
  continue reading
 
Artwork

1
Bits & Bytes

Stegmann and Company

icon
Unsubscribe
icon
icon
Unsubscribe
icon
Monatlich+
 
Bei “Bits & Bytes” fokussieren wir uns auf die Themen IT und Digitalisierung. Dabei diskutieren wir neue Trends, Testen nützliche Tools und berichten von unseren Erfahrungen. Dabei beschäftigen wir uns mit KI-Themen wie ChatGPT und Microsoft Copilot, agilen Arbeitsweisen wie Scrum sowie digitalen Anwendungen und Software, die zur Effizienzsteigerung und Arbeitserleichterung beitragen.
  continue reading
 
Artwork

1
Engineering Kiosk

Wolfgang Gassler, Andy Grunwald

icon
Unsubscribe
icon
icon
Unsubscribe
icon
Wöchentlich
 
Der Engineering Kiosk ist der deutschsprachige Software-Engineering-Podcast mit Wolfgang Gassler und Andy Grunwald rund um die Themen Engineering-Kultur, Open Source, Menschen, Technologie und allen anderen Bereichen, die damit in Verbindung stehen.Wir, Wolfgang Gassler und Andy Grunwald, sind beide Software Engineers und Engineering Manager, die sich bei ihrer beruflichen Laufbahn bei @trivago kennengelernt haben.Zusammen bringen sie über 30 Jahre Tech-Erfahrung an das Mikrofon und lassen d ...
  continue reading
 
Artwork

1
Skillbyte Technologie Podcast

Skillbyte Podcast Team

icon
Unsubscribe
icon
icon
Unsubscribe
icon
Monatlich
 
Im Skillbyte-Podcast besprechen wir aktuelle Trends und Technologien aus den Bereichen #EnterpriseSoftware #BigData #Cloud #MachineLearning #ArtificialIntelligence und #DevOps. Skillbyte ist ihr Partner für digitale Exzellenz und Innovation seit 2013. #Bildung #Technologie #Business #Digital #Innovation #Digitalisierung #Unternehmertum #Entrepreneur #Entrepreneurship #Internet #skillbyte
  continue reading
 
Inside Darknet ist ein Podcast über das Darknet🌑 Hacker 🕸️ Cyberkriminalität ⛓️ Sicherheitslücken🩸und all die Dinge die sich in den illegalen Seiten des Internets abspielen. Neue Folgen erscheinen jedenSamstag, überall, wo es Podcasts gibt. Discord und weitere Links: http://guns.lol/insidedarknet
  continue reading
 
Artwork

1
decodify

b-nova

icon
Unsubscribe
icon
icon
Unsubscribe
icon
Monatlich
 
Bei decodify geht es um spannende Talks, vielseitige Diskussionen, einfache Erklärungen, Alltagsbeispiele und Hintergrundinformationen rund um Themen wie Cloud, DevOps und Software Development, präsentiert von b-nova aus Basel. Geeignet für Profis, Einsteiger und Interessierte an neuen IT Themen.
  continue reading
 
Basis 108. Der IT-Zukunftspodcast. heißt das Audioformat der Bechtle AG. Einmal im Monat begrüßt Moderatorin Svea Eckert interessante Gäste aus Wirtschaft, Politik und Wissenschaft. Svea Eckert ist eine investigative Tech-Journalistin. Sie arbeitet als freie Reporterin für die Tagesschau, die Tagesthemen, die ARD-Story und das junge YouTube-Format strg_f. Viele ihrer Recherchen wurden mit Preisen ausgezeichnet. Sie hostet verschiedene Podcasts und spricht auf großen Konferenzen, wie der Defc ...
  continue reading
 
Die ITWELT (vormals: COMPUTERWELT) ist Österreichs führende IT- Zeitung für den gesamten Bereich der Informationstechnik und Telekommunikation. Wir schreiben für leitende IT- Experten (IT-Leiter, CIO) in IT-Branche und EDV-Abteilungen. Unsere Themen: Business Software, Netzwerk, Security, Mobile Kommunikation, Infrastruktur, Cloud, Wirtschaft, IT-Innovation. Zudem finden Sie hier IT-Anbieter, Whitepaper, Webinare, Termine, Social Events und Praxisreports aus der IT und ITK Branche.
  continue reading
 
Artwork

1
Die DATENWACHE - Datenschutz & Sicherheit

Dr. Michael "Mitch" Symalla - Dein Begleiter für mehr Datenschutz und Privatsphäre

icon
Unsubscribe
icon
icon
Unsubscribe
icon
Monatlich
 
Die Datenwache ist der verständliche und ehrliche Podcast für alle, denen die Sicherheit Ihrer Daten und Ihrer Privatsphäre nicht egal ist. Du willst nicht akzeptieren, dass Unternehmen jeden Deiner Schritte on- und offline ausspionieren und Kriminelle sich an Dir schadlos halten? Hier erhältst Du die Themen einsteigerfreundlich erklärt und gezeigt, wo die Gefahren liegen. Nur Bange machen ist aber nicht, wir schauen uns auch an wie Du Dich schützen kannst. Datenschutz und Privatsphäre, prak ...
  continue reading
 
Artwork

1
Medientier

Medientier

icon
Unsubscribe
icon
icon
Unsubscribe
icon
Monatlich
 
Das freundliche Content-Creator-Chamäleon mit 23 Jahren Branchenerfahrung ist Geschäftsführer einer Filmproduktion und gibt ungeschönte, ungewöhnliche und hoffnungslos ehrliche Einblicke in eine Welt geprägt von großen Chancen, Emotionen aber auch Blendern und heftigen Widerständen. Tipps, Interviews, Marketingstrategien, Philosophien über Kreativität, Selbstmotivation, Vermarktung, ständiger Schaffensdrang und schlaflose Nächte. Der zweifache Familienvater lebt dabei den Horror des sicherhe ...
  continue reading
 
Loading …
show series
 
Wir drehen wieder am „Glücksrad“ – diesmal allerdings ausschließlich mit ARIA-Attributen! Schepp hat sich als Mitspielende Accessibility Engineer Daniela Kubesch (LinkedIn / Bluesky / Mastodon) und Frontend/Design-Systems Engineer Marco Bretschneider eingeladen. Der Zufall spuckt ARIA-Attribute aus und wir sezieren sodann deren Einsatzfälle, Stolpe…
  continue reading
 
Sie haben sich perfekt vorbereitet, das Gespräch lief gut – und trotzdem kam keine Zusage? Dann liegt es vielleicht gar nicht an Ihnen. In dieser Episode spreche ich über sechs Wahrheiten, die Ihnen kein Hiring Manager offen sagen wird – die aber im Hintergrund über Zu- oder Absage entscheiden. Aus über 35 Jahren Erfahrung als Sales Leader, Hiring …
  continue reading
 
Wir berichten euch von der Fluttercon und droidcon aus Berlin. Dieses Special begrüßt neben Jan ein paar alte und neuere Gäste im Podcaststudio. Gabriel, Clemens und Jan stellen euch das interessante Konzept hinter der Android-Konferenz droidcon vor. Sie verbindet gleich mehrere Events unter einem Dach – darunter die für uns sehr interessante Flutt…
  continue reading
 
Datenbanken sind das Rückgrat vieler Anwendungen, aber wie konsistent sind deine Daten eigentlich? Egal ob Banküberweisung, Sneaker-Kauf im Online-Shop oder das neueste Side-Project: Oft verbergen sich hinter der vermeintlich „sicheren“ Datenhaltung komplexe Stolperfallen. Wie funktionieren Transaktionen wirklich? Und warum kann ausgerechnet ein fa…
  continue reading
 
In dieser Folge spricht Alexa mit Susanne Krieg (Cybersicherheitsagentur Baden-Württemberg, kurz CSBW), über die Arbeit der 2021 gegründeten Landesbehörde. Wir diskutieren, wie die CSBW mit Prävention, Detektion und Reaktion den öffentlichen Sektor unterstützt und warum Schulungen, E-Learnings und offene Kommunikation entscheidend sind. Susanne gib…
  continue reading
 
Mit dabei: Christof Windeck, Berti Kolbow-Lehradt und Greta Friedrich Netzwerkkameras haben ein Grundstück im Blick und melden Auffälligkeiten per App – so die Theorie. Doch hilft Videoüberwachung wirklich gegen Einbrecher? Es gibt WLAN-Kameras für drinnen oder draußen, mit oder ohne Stromanschluss und mit Cloud-Anbindung oder Speicherung auf Micro…
  continue reading
 
Die „programmier.con 2025 - Web & AI Edition“ findet am 29. und 30. Oktober 2025 statt. Sichert euch jetzt Tickets für die Konferenz auf unserer Webseite! Nachdem es in letzter Zeit vermehrt zu kompromittierten Paketen auf npm kam, haben GitHub und npm Maßnahmen angekündigt, um eure Supply-Chains zukünftig besser zu schützen. Dave berichtet, was es…
  continue reading
 
Sie sind ein Top-Sales-Profi, liefern Deals über Millionen – und bleiben trotzdem auf LinkedIn unsichtbar? Dann verschenken Sie Chancen. In dieser Episode erfahren Sie: Warum das grüne #OpenToWork-Banner Ihren Marktwert verwässern kann Wie Sie die Info-Sektion als Elevator Pitch nutzen und so auffindbar werden Welche Fehler Kandidaten in Deutschlan…
  continue reading
 
The UAPI Boot Loader Specification defines conventions that let multiple operating systems and bootloaders share boot config files. So far, only systemd-boot implements it - and it’s UEFI-only by design.As a result, hybrid UEFI/BIOS images require maintaining (and keeping in sync) two sets of bootloader configs: one for systemd-boot, and one for a …
  continue reading
 
I overview how OS management is done at Meta. We run millions of Linux servers and we have to make sure that OS gets updated on all of them in a given period of time. To do that we developed several products: MetalOS (Image based version of CentOS), Antlir (image builder) and Rolling OS Update (a service that keeps a set of DNF repos in sync with u…
  continue reading
 
Updates are a critical piece of managing your fleet of devices. Nowadays, Yocto-based distributions can utilize layers for well-established update mechanisms. But, did you know that recent releases of Yocto already come with a simple update mechanism?Enter systemd-sysupdate: a mechanism capable of automatically discovering, downloading, and install…
  continue reading
 
`test.thing` is a VM runner which targets guests using an API defined by systemd. It started after a conversation at devconf about turning `mkosi qemu` into a library. A quick intro.~~composefs is an approach to image-mode systems without the disk images. Files are stored in a de-duplicated content-addressed storage with integrity guaranteed throug…
  continue reading
 
With Bootable Containers (bootc), we can place the operating system files inside a standard OCI container. This lets users modify the content of the operating system using familiar container tools and the Containerfile pattern. They can then share those container images using container registries and sign them using cosign.Using composefs and fs-ve…
  continue reading
 
S3NS is a trusted cloud operator that self-hosts Google Cloud infrastructure in France, targeting the SecNumCloud certification, the most stringent Cloud certification framework. SecNumCloud includes strict legal and operational constraints. To manage these systems securely and reproducibly, we’ve built a family of dedicated administration terminal…
  continue reading
 
In last year's ASG!, bootc and bootable containers were introduced. In this talk, we'll go over what changed since last year, and how Fedora CoreOS and RHEL CoreOS are leveraging bootable containers to reduce maintenance and increase sharing.Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/about this event: https://cfp.al…
  continue reading
 
Introduce ue-rs, a fresh project that aims to be a drop-in reimplementation of update engine, written in Rust.The goal of ue-rs is to have a minimal, secure and robust implementation of update engine, required by A/B update mechanism of Flatcar Container Linux. Just like the existing update engine, it downloads OS update payloads from a Nebraska se…
  continue reading
 
Traditional package updates using tools like RPM or Zypper can introduce risks, such as incomplete updates or accidentally breaking the running system. To overcome these challenges, we developed **container-snap**, a prototype plugin designed to deliver atomic OS updates—updates that are fully applied or rolled back without compromising the system'…
  continue reading
 
In the Linux world there are several tools and technologies to encrypt data on a hard drive, most falling into one of two categories: block device encryption (like LUKS) or stacked filesystem encryption (like EncFs or gocryptfs). This presentation will introduce Dirlock, a new tool that belongs to a third category: native filesystem encryption, usi…
  continue reading
 
File descriptors for processes on Linux have been available for quite some time now. Userspace has adapted them widely.Over the last two years or so we've extended the abilities of pidfds significantly. This talk will go over all the new features and deep dive into their implementation and usage.Licensed to the public under https://creativecommons.…
  continue reading
 
Last year, Lennart Poettering of the systemd fame, [gave a presentation](https://media.ccc.de/v/all-systems-go-2024-276-varlink-now-) at this very same conference, where he introduced Varlink, a modern yet simple IPC mechanism. He presented a case for Varlink, rather than [D-Bus](https://en.wikipedia.org/wiki/D-Bus) to be the future of Inter-proces…
  continue reading
 
Going for minimal containers with restricted system calls and unprivileged users is the usual Kubernetes approach these days, and it works great for most web apps. However, the development of more complex infrastructure extensions frequently hinders application functionality.While looking for a solution to deploy virtiofsd in an unprivileged contai…
  continue reading
 
CentOS Stream is especially suited for production deployments. In these environments it's often common to develop improvements to distribution packages and want to contribute them upstream. Unfortunately, until very recently that required one to then maintain their own build and deployment pipeline for the packages, at least until the changes made …
  continue reading
 
GNOME has collected some very old code over the years. During the recent GNOME 49 release, we've made some drastic cleanups. Most visibly, we've dropped support for X11 and gained many dependencies on systemd. Let's explore some of the what and why for these changes!Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/about t…
  continue reading
 
Coredumping on Linux has long been a nightmare. Currently two modes are supported:(1) Dumping directly into a file somewhere on the filesystem.(2) Dumping into a pipe connected to a usermode helper process spawned as a child of the system_unbound_wq or kthreadd.For simplicity I'm mostly ignoring (1). There's probably still some users of (1) out the…
  continue reading
 
It has been 10 years since Axis Communications had a presentation at the systemd conference. Back then, we have shown how we have increased our product quality, stability and boot times by porting our platform to systemd. 10 years later, we had different challenges to keep the resource usages and boot times under control. We have started from botto…
  continue reading
 
GNOME OS is a distribution based around systemd-sysupdate. This year, we finally created a live installer image using the same /usr partition as the installed OS. The main innovation however is the ability to install without the need to reboot. The user can start working while the installation is happening.This live image is built using systemd-rep…
  continue reading
 
Flatpak is the de-facto standard for distributing desktop applications across various Linux based systems. It also offers other advantages such as sandboxing. It is particularly useful for image based systems as it installs the applications into a separate location and doesn't try to modify the system.GNOME OS is GNOME's development, testing and QA…
  continue reading
 
Many traditional container engines make use of the "subuid" concept and the "newuidmap" tool to implement a concept of "unprivileged" user-namespace containers on Linux. This approach has many shortcomings in my PoV, from both a security and scalability standpoint.Recent systemd versions provide a more powerful, more secure, mor scalable alternativ…
  continue reading
 
oo7-daemon is the new D-Bus Secret Service provider that aims to fully replace gnome-keyring. In this followup (continuation of my 2024 talk) lightning talk, I will go through the progress made, the challenges faced and the status of systemd credentials integration.Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/about th…
  continue reading
 
Marco will review the features available in the initramfs-tools ecosystem, the initrd generator used by Debian and Ubuntu, and how they can be implemented (or not) by adopting mkosi-initrd.Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/about this event: https://cfp.all-systems-go.io/all-systems-go-2025/talk/E989ZX/…
  continue reading
 
At Meta, we've been looking to revamp our internal container runtime (Twine). Instead of maintaining all the low level container runtime code ourselves, we'd much prefer having more of this managed by systemd. This talk will go over what we did to make systemd transient units a suitable environment for running system containers (pid namespace suppo…
  continue reading
 
Simplify systemd management with `isd`! `isd` is a TUI offering fuzzy search for units, auto-refreshing previews, smart sudo handling, and a fully customizable interface for power-users and newcomers alike.If you ever became frustrated while typing:- `systemctl start --user unit-A.service` (manually starting a unit)- `systemctl status --user unit-A…
  continue reading
 
Many OS artifacts today are still verified using proprietary, stateful keyring formats.With the "File Hierarchy for the Verification of OS Artifacts (VOA)" an attempt is made to rid the ecosystem of this limitation by implementing a generic lookup directory.With extensibility in mind, this unifying hierarchy currently provides integration for OpenP…
  continue reading
 
For many years, firewall solutions on Linux have grown and evolved, without any major change, until eBPF. While eBPF can allow very fast and efficient packet filtering, the learning curve doesn't make it easily accessible to non-developers. bpfilter aims to bridge the gap between existing tools (nftables, iptables) and modern technologies such as e…
  continue reading
 
More than six months have passed since Daan tried to ~~shame~~ gently peer pressure Lennart to actually use the stuff he builds, via a FOSDEM talk:https://fosdem.org/2025/schedule/event/fosdem-2025-4057-particleos-can-we-make-lennart-poettering-run-an-image-based-distribution-/Did he succeed? Is dogfooding standard practice now in the systemd devel…
  continue reading
 
systemd-sysext provides a nice way to enhance a distribution with a read-only root filesystem without the need to reboot. But there is additional tooling necessary to manage the sysext images:* install an image which is compatible with the installed OS version* update installed images to the newest compatible version* rollback images in case of an …
  continue reading
 
Landlock is an unprivileged kernel feature that enables all Linux users to sandbox their processes. Complementary to seccomp, developers can leverage Landlock to restrict their programs in a fine-grained way. While Landlock can be used by end users through sandboxer tools, there is currently no well-integrated solution to define security policies t…
  continue reading
 
On image based desktops distributions such as Fedora Atomic desktops and Universal Blue, users are expected to run their graphical applications using Flatpaks and their command line ones using containers. But that approach does not work well for some applications that require more privileges, direct access to devices or kernel interfaces.With syste…
  continue reading
 
All the big cloud providers provide your machines with a unique cryptographic identity that can be used to talk to their cloud services securely without having to manage or rotate any cryptographic secrets yourself. For example GCP has Service accounts and AWS has IAM roles. This ubiquity of cloud identity and the seamless integration with all the …
  continue reading
 
systemd-confext is a lightweight overlay mechanism for /etc, allowing you to drop in a configuration extension ("confext") bundle and let systemd make it visible to your service as though it was already shipped with the base image. Building on the same extension magic as systemd-sysext, confext also introduces extra features tailored for the /etc u…
  continue reading
 
Provide a varlink service to access /etc/passwd and /etc/shadow so that no setuid and setgid binaries are necessary for this task.There are two independent "problems" which can be solved with the same idea: all files in /usr should be owned by root:root and no setuid binary should be needed. The first one is a requirement of image based updates of …
  continue reading
 
Haven’t you ever wanted to find ways to make your Rust code the most optimal in the world? I know how you feel. This is a talk, where I’d tell you how easy it is to profile your Rust software and how most often the solutions are trivial.This is a story of how I used a few readily-available Open Source tools to achieve huge optimizations in [zbus](h…
  continue reading
 
Let's have an open discussion with systemd developers who are at ASG and users in the audience. We will open with the developers saying what they plan to work on in the near future, and then allow questions / comments from the audience.Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/about this event: https://cfp.all-syst…
  continue reading
 
Communication is paramount in modern application development. This applies equally well to the process of writing applications and to the code itself. The complexity of the tasks ahead of us calls for a distributed and coordinated development effort, and this often manifests in our code: We design distributed, communicating systems to split complex…
  continue reading
 
Same as every year, a lot has happened in the systemd project since last year'sASG. We released multiple versions, packed with new components and features.This talk will provide an overview of these changes, commenting on successes andchallenges, and a sneak peak at what lies ahead.Licensed to the public under https://creativecommons.org/licenses/b…
  continue reading
 
Running **BPF** programs today requires *CAP_BPF* capability, which is an all or nothing BPF capability.But BPF nowadays spans a large area, from simple monitoring to potentially invasive fields like network or tracing.BPF Tokens aims to add fine grained BPF capabilities to systemd units and containers, avoiding to give the whole *CAP_BPF* capabili…
  continue reading
 
Systing helps you solve problems in minutes rather than days. Out of the box it gives you everything you could possibly need, combined with perfetto’s visualization you will never be confused again.This talk will introduce systing, a tracer that is built on modern BPF tooling, purpose built to debug large applications with complicated interactions.…
  continue reading
 
I'll use these 20 minutes to explain why and why contributing to systemd is a great experience. We'll avoid beating dead horses by not discussing git forges and email, but instead focus on the development experience, from building systemd distribution packages from git main, running integration tests against those distribution packages, debugging f…
  continue reading
 
Loading …

Kurzanleitung

Hören Sie sich diese Show an, während Sie die Gegend erkunden
Abspielen