Secure by Design. Ignored by Default.
Summary
Hosts David Spark and Andy Ellis welcome Julie Davila, President of Security Tinkerers, to discuss framing security as a quality dimension rather than a blocker. They debate structural fixes versus cultural shifts in secure coding, the importance of context over rigid best practices, and strategies for scaling security teams. The episode also covers AI agent risks, emphasizing blast radius containment over prompt injection prevention, and concludes with an introduction to the Security Tinkerers community.
Topics discussed
Intro: Security as a peer quality dimension and guest introduction
Structural fixes vs. culture: Making insecure code impossible to ship
Context over best practices and scaling security strategically
Sponsor segment: Mobile security challenges and GuardSquare event
What's Worse: Early truth vs. late blame in risk acceptance
CISOs absorbing infrastructure teams and the CIO convergence
AI agent exploitability: Prompt injection and blast radius containment
The Security Tinkerers community and closing remarks
Listen ad-free on Castria