Maintaining quality over time is often a challenge for most codebases. Technology evolves, deadlines have to be met and sometimes honest mistakes just happen. But what if there were solutions to keep programmers honest and also automate some of the maintenance tasks?
Tooling offers a range of options to automate both menial and complex codebase maintenance tasks. It can also be used to ensure quality standards are met in future developments. Join me for a discussion about quality, technical debt, automation and of course a tour of the various tools available to C++ developers that help improve and maintain quality standards. EVENT:
SwedenCPP 2020 SPEAKER:
Mathieu Ropert PUBLICATION PERMISSIONS:
Original video was published with the Creative Commons Attribution license (reuse allowed) ATTRIBUTION CREDITS:
Original video source: https://www.youtube.com/watch?v=6LbTfb3Sks0 https://www.youtube.com/watch?v=ramjaM2qakM

Advent of Code is an Advent calendar of small programming puzzles for a variety of skill sets and skill levels that can be solved in any programming language you like. People use them as a speed contest, interview prep, company training, university coursework, practice problems, or to challenge each other. In this talk, the creator of Advent of Code will give a behind-the-scenes look at what it takes to run a month-long programming event for over 200,000 people. EVENT:
Øredev 2019 SPEAKER:
Eric Wastl PUBLICATION PERMISSIONS:
Conference Organizers provided Coding Tech with the permission to republish Øredev tech talks. https://www.youtube.com/watch?v=CFWuwNDOnIo

The best way to enable developers to create secure applications is to “shift left” in security. That means providing developers with the tools and techniques that help build more secure applications from the get-go. Developers may get security controls into their applications in different ways. They may write them from scratch following security training or guidance, they may use open source libraries, or they may use frameworks that have the security features built in already. In this talk we explore JavaScript applications that use different types of security controls implemented at levels ranging from developer code, to libraries and plugins, to different frameworks, and analyze which applications actually turn out to be more secure. This work is based on analysis of over 500 open source JavaScript applications on GitHub that use client-side frameworks and template engines to prevent XSS, as well as server-side frameworks (Express, Koa, Hapi, Sails, Meteor) and CSRF prevention mechanisms.
In conclusion, we provide data-driven recommendations for framework maintainers and application developers on how to develop and choose a framework that will actually make applications more secure. EVENT:
AppSec California 2020 SPEAKER:
Ksenia Peguero PUBLICATION PERMISSIONS:
Original video was published with the Creative Commons Attribution license (reuse allowed) ATTRIBUTION CREDITS:
Original video source: https://www.youtube.com/watch?v=Ku8mPXmX7-M https://www.youtube.com/watch?v=Z1mZ9wSi4Bo