The Changelog: Software Development, Open Source Lessons from 5 years of startup code audits (Interview)
4 snips
Jun 24, 2022 
Ken Kantzer, co-founder of PKC Security, shares insights from over 20 code audits he and his team conducted on startups. He discusses the surprising connection between team size and product quality, emphasizing the importance of external perspectives. The conversation highlights a shift toward simpler engineering practices, the evolution of security methods in development, and navigating open-source security challenges. Ken also warns about flawed business logic in software and shares lessons learned from the fast-paced world of startups.
AI Snips
Chapters
Transcript
Episode notes
Easier Security
- Writing secure software is easier now due to increased open-source usage and developer security awareness.
- Frameworks and libraries fix bugs, and developers are more security-conscious.
Obvious Vulnerabilities
- The most impactful security vulnerabilities are often obvious and easy to exploit.
- This contradicts the notion that hackers always use complex, unpredictable methods.
Monorepo Advantages
- Use monorepos for easier auditing and improved developer ergonomics.
- Consolidating code simplifies searching, dependency tracking, and overall code management.