Ep 27: Trust, but verify - Why programmers should maintain a healthy skepticism

SEEK Bytes

Why is a healthy dose of scepticism essential for software engineers and why should you cast doubt on things we should trust; CDNs, security reports and our own code.

Delve into the concept of “Abstraction-ception”, making the bold claim that everything we know is an abstraction of an abstraction.

Can learning topics superficially lead to unexpected bugs in code?

Tune in to hear real-world stories of security issues that the SEEK Bytes hosts have encountered, and how abstractions are both necessary for understanding and risky in making us believe we know "enough".

Resources:

• https://www.bleepingcomputer.com/news/security/dev-rejects-cve-severity-makes-his-github-repo-read-only/
• https://lab.wallarm.com/polyfill-io-supply-chain-attack-malicious-javascript-injection-puts-over-100k-websites-at-risk/
• https://carbon-steel.github.io/jekyll/update/2024/06/19/abstractions.html