Code as Risk • Kevlin Henney • GOTO 2017

This presentation was recorded at GOTO Amsterdam 2017. #GOTOcon #GOTOams

Kevlin Henney - Independent Consultant, Speaker, Writer & Trainer @KevlinHenney

ABSTRACT
What is risk? Many people aren't sure, but it's not just uncertainty: risk is exposure to uncertainty.
Instead of just plastering over the cracks, security should also involve reducing the size and number of cracks, reducing the opportunities for cracks to appear, reducing the class of errors and [...]

Download slides and read the full abstract here:

RECOMMENDED BOOKS

#CodeAsRisk #Security #Encryption #KevlinHenney

CHANNEL MEMBERSHIP BONUS
Join this channel to get early access to videos & other perks:

Looking for a unique learning experience?

SUBSCRIBE TO OUR CHANNEL - new videos posted almost daily.

[greenboy]

about 26:00. I worked at a company once that required every line of code be commented. The comments were extracted later and became the documentation for the code.

[JaysonSunshine]

Pretty stellar presentation. First exposure to Kelvin, but I suspect not the last.

[GeorgeTsiros]

31:09 i might have said this before, but at this point it becomes increasingly simpler to write straight assembly

[KeyserTheRedBeard]

interesting upload GOTO Conferences. I killed the thumbs up on your video. Keep on up the superb work.

[curiosull]

Now I want to go back in time to capture all the cool failures I saw.

[RafaelMilewski]

'We do that in English, we do in Dutch... But not in Java' hahaha

[maxc]

You don't code if you gaven't had to deal with a "Thing controller manager proxy factory".

[maxc]

Why not just this... ?

var PadL = (str, len) => " ".repeat(Math.max(0, len - str.length)) + str;

[MrAbrazildo]

12:13, 'goto' keyword would had save the day. Another way to bureaucratically prevent that would be to adopt a practice of write a checking at the beginning of each f(), according to a debug compilation. For instance:

some_type_in_return use_modes_pointer () {
#ifndef NDEBUG
/* Check pointers. */
#endif
/* ... */
}
49:30, '4. Keep it simple': functional programming is simpler, but I use OO in most cases, because '3. Design for security policies'.
The "const correctness principle" (all const by default) is a '5. Deny by default' and keeps the '6. least privileges'. However, it seems, by examples I've been seeing, that languages other than C++ fail to achieve the 6, regarding to hiding data changing, or keeping the '6. least privileges' of who has the right to change data.

[johnmcleodvii]

Does Java have the concept of pointers exposed to the programmer? I know that in C# everything is a pointer, but that fact is hidden from the programmer.