BT

Facilitating the Spread of Knowledge and Innovation in Professional Software Development

Write for InfoQ

Register Sign in

Unlock the full InfoQ experience

Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with content, and download exclusive resources.

Log In

or

Don't have an InfoQ account?

Stay updated on topics and peers that matter to youReceive instant alerts on the latest insights and trends.
Quickly access free resources for continuous learningMinibooks, videos with transcripts, and training materials.
Save articles and read at anytimeBookmark articles to read whenever youre ready.

Logo - Back to homepage

News Articles Presentations Podcasts Guides

Topics

Development

Featured in Development

Adopting Memory-Safety and Fine-Grained Compartmentalisation with CHERI

David Chisnall discusses how the CHERI hardware architecture redefines pointer safety to solve isolation and sharing challenges. He explains how CHERI enables spatial and temporal memory safety for C/C++, scales down to microcontrollers with CHERIoT, and replaces costly OS-level RPC mechanisms with lightweight, auditable compartmentalization - all without requiring massive codebase rewrites.

All in development

Architecture & Design

Featured in Architecture & Design

Architecture as a Socio-Technical Craft

Architecture is not a fixed choice made once; fitness is a moving target driven by changing regulations, tech, and markets. Even a sound design can silently stop fitting over time without bad calls. Spanning seven articles on context stores, gateways, and topologies, this collection treats architecture as an evolving sociotechnical craft where teams deliberately shape friction, fitness, and flow.

All in architecture-design

AI Infrastructure

Featured in AI, ML & Data Engineering

Prompt to Prod: Engineering an Autonomous SDLC at Scale

Andrew Swerdlow shares how Roblox scales autonomous software development from prompt to production. He discusses building robust security sandboxes, extracting institutional knowledge via code review exemplars, updating engineering infrastructure, and redefining productivity metrics around feature velocity and long-running AI turns to achieve trusted, automated deployment at scale.

All in ai-ml-data-eng

Culture & Methods

Featured in Culture & Methods

Rightsizing Platform Engineering: Building the Platform Your Organization Actually Needs

Shift-left and DevOps have impacted how we flow changes from inception to production, but at the cost of increased cognitive load and duplication of effort across testing, security, and maintenance. This article explores the real-world challenges of rightsizing developer platforms and finding a cultural match for engineering teams who use them to reduce cognitive load and deliver change faster.

All in culture-methods

DevOps

Featured in DevOps

Enchant Your AI and APIs with eBPF Magic ��

Dan Finneran discusses the risks of unowned AI-generated code in production and demonstrates how eBPF can intercept and control AI API traffic in Kubernetes. He explains how kernel-level socket hooks enable transparent prompt filtering, model swapping, token limits, and syscall restrictions to secure AI agents without modifying application source code or restarting containers.

All in devops

Events

Helpful links

Choose your language

AI Security & Privacy Engineering Certification

Secure and govern production AI systems, from sensitive data to guardrails, evals, and audits.
Online. Register now.

Architect Certification

Distributed systems, decentralized decisions, platform engineering, and AI architecture.
Online. Register Now.

Engineering Leadership Certification

Work through leadership decisions with senior peers facing similar technical trade-offs.
Online. Register Now.

AI-Assisted Engineering Certification

Your coding agent moves fast. Who checks whether it's making the codebase better?
Online. Register Now.

QCon San Francisco

What's working across AI, architecture, and leadership, from the teams doing it.
Register. Early bird ends August 11.

QCon AI New York

Production AI across agents, context, evals, security, and infrastructure, from the senior engineers building it.
Registration open.

QCon London

What early-adopter teams have proven in production, across 15 engineering tracks.
Register. Early bird ends August 11.

InfoQ Homepage Interviews Web Security with Aaron Bedra

Web Security with Aaron Bedra

Download

19:00

Bio

Aaron Bedra is the application security lead at Braintree. He is the co-author of Programming Clojure, Practical Software Security, and another upcoming Pragmatic Press book.

About the conference

GOTO Aarhus is an premier software development conference designed for developers, team leads, architects, and project managers. At GOTO, the program is created for developers by developers. Our concept has always been to present the latest developments as they become relevant and interesting for the software development community.

Dec 13, 2013

Interview with

Aaron Bedra

by

Dio Synodinos

BT