GOTO - The Brightest Minds in Tech

Software Security for Developers • Laur Spilca & Thomas Vitale

Apr 14, 2026
Guest
Laurentiu Spilca
Laurentiu Spilca, Java Champion and author focused on Java, Spring, and security. They discuss why developers avoid security. They cover essential cryptography concepts, pitfalls of reinventing standards, risks from AI-generated code, and the importance of understanding certificates and PKI.
Ask episode
AI Snips
Chapters
Books
Transcript
Episode notes
ADVICE

Learn Practical Security Fundamentals

  • Do learn security fundamentals without deep math to make informed choices about encryption, hashing, and signing in your apps.
  • Laurentiu recommends focusing on developer-relevant explanations so you can choose algorithms like RSA or ECC appropriately.
ADVICE

Make Security Part Of Developer Craft

  • Do make security part of everyday development, not an afterthought, and treat non-functional requirements professionally.
  • Laurentiu recommends approachable learning resources that remove fear and start from foundations to build competence.
INSIGHT

Distinguish Data Formats From Protocols

  • Insight that developers often confuse formats and protocols, e.g., JWT is a data format not an auth protocol.
  • Laurentiu stresses understand formats (JWT, JWS, JWE) before using protocols like OAuth 2 or SAML.
Get the Snipd Podcast app to discover more snips from this episode
Get the app