Sr. Content Developer at Microsoft, working remotely in PA, TechBash conference organizer, former Microsoft MVP, Husband, Dad and Geek.
163807 stories
·
33 followers

Insecure Vibe Coding: When AI Writes Exploitable Software - Sana Talwar - NDC Oslo 2026

1 Share
From: NDC
Duration: 42:19
Views: 8

This talk was recorded at NDC Oslo in Oslo, Norway. #ndcoslo #ndcconferences #developer #softwaredeveloper

Attend the next NDC conference near you:
https://ndcconferences.com
https://ndcoslo.com/

Subscribe to our YouTube channel and learn every day:
/ @NDC

Follow our Social Media!

https://www.facebook.com/ndcconferences
https://twitter.com/NDC_Conferences
https://www.instagram.com/ndc_conferences/

#copilot #chatgpt #claude #code #vibecoding #ai #sql #functionalprogramming #programminglanguages

Developers use Copilot, ChatGPT, and Claude to write code fast. Accept what compiles, ship what works, that's vibe coding and it's everywhere. And it produces the same categories of vulnerable code, over and over, because AI tools optimize for "runs without errors," not "resists attack."
This talk is three live demos and a workflow. We look at real AI-generated code that looks fine, then pull on the thread. Auth logic with a subtle JWT flaw. Input validation that checks format but misses encoding tricks, leaving the SQL query injectable. Password hashing with real libraries — wrong algorithm, wrong config. Each demo ends with an exploit and a fix.
The patterns aren't random. They're predictable: training data includes all the bad code that's ever been written, models don't know that 2012 crypto advice is outdated, and "compiles and runs" is not the same bar as "secure." Once you know what to look for, you can spot it fast and so can attackers.
You'll leave with a checklist for reviewing AI-generated code (auth edge cases, parameterization vs. validation, crypto choices, secret storage), updated mental models for where AI output needs extra scrutiny, and a workflow that lets your team keep the speed benefits without dropping the security bar.

Read the whole story
alvinashcraft
just a second ago
reply
Pennsylvania, USA
Share this story
Delete

This AI Expert Argues We're Underestimating AI's Productivity Impact — With Ethan Mollick

1 Share

Ethan Mollick is a professor at the Wharton School and author of Coexistence: The Next Phase of AI. Mollick joins Big Technology to discuss why AI's remarkable advances haven't yet translated into massive productivity gains across the economy. Tune in to hear why companies need to fundamentally rethink how they operate to unlock AI's full potential, where businesses are already seeing returns, and what organizational transformation could look like. We also cover whether AI development will hit a wall, the rise of personal AI agents, the future of jobs, robotics, education, and the risks of giving AI access to our private information. Hit play for a spirited conversation about what it will take for AI to truly transform the economy and our everyday lives.

---

Enjoying Big Technology Podcast? Please rate us five stars ⭐⭐⭐⭐⭐ in your podcast app of choice.

Want a discount for Big Technology on Substack + Discord? Here’s 25% off for the first year: https://www.bigtechnology.com/subscribe?coupon=0843016b You can find the book here: https://www.amazon.com/Co-Existence-Next-Phase-Ethan-Mollick/dp/B0H2GJJVDW/

Learn more about your ad choices. Visit megaphone.fm/adchoices





Download audio: https://pdst.fm/e/tracking.swap.fm/track/t7yC0rGPUqahTF4et8YD/pscrb.fm/rss/p/traffic.megaphone.fm/AMPP5127683299.mp3
Read the whole story
alvinashcraft
17 seconds ago
reply
Pennsylvania, USA
Share this story
Delete

Panel: When AI Feels Empathic - Richard Campbell, Martine Dowden, Michelle Frost & Tessel Haagen

1 Share
From: NDC
Duration: 59:09
Views: 13

This talk was recorded at NDC Oslo in Oslo, Norway. #ndcoslo #ndcconferences #developer #softwaredeveloper

Attend the next NDC conference near you:
https://ndcconferences.com
https://ndcoslo.com/

Subscribe to our YouTube channel and learn every day:
/ @NDC

Follow our Social Media!

https://www.facebook.com/ndcconferences
https://twitter.com/NDC_Conferences
https://www.instagram.com/ndc_conferences/

#ai #ethics

Panel moderator: Richard Campbell
Panellists: Michelle Frost, Martine Dowden, Tessel Haagen

There’s a word for what a person feels when someone truly listens to them, then understands and shares their experience and perspective. There isn’t one for what happens when a language model does it.

We’ve been borrowing terms from psychology that don’t quite fit, and then defaulting to technical terms that don’t reach far enough. In the space between, we’re shipping systems that produce and evoke something real in people: attachment, relief, dependency, maybe genuine help. And we’re doing it without the language to describe what that actually is, or any shared understanding of what it should require from the developers and technologists making those
decisions.

This gap is showing up in the lives of people who are already vulnerable, as well as in real moments of benefit we would be wrong to dismiss. As an industry, we don’t have this figured out. Neither does anyone on this panel. We have different backgrounds, different experiences and instincts, things we will genuinely agree or disagree on, and we think this conversation belongs here, with the people who are actually shipping our future.

Read the whole story
alvinashcraft
23 seconds ago
reply
Pennsylvania, USA
Share this story
Delete

The Undersea Infrastructure - Richard Campbell - NDC Oslo 2026

1 Share
From: NDC
Duration: 50:44
Views: 358

This talk was recorded at NDC Oslo in Oslo, Norway. #ndcoslo #ndcconferences #developer #softwaredeveloper

Attend the next NDC conference near you:
https://ndcconferences.com
https://ndcoslo.com/

Subscribe to our YouTube channel and learn every day:
/ @NDC

Follow our Social Media!

https://www.facebook.com/ndcconferences
https://twitter.com/NDC_Conferences
https://www.instagram.com/ndc_conferences/

#cloud

Beneath the world’s oceans lies a vast and largely unseen network of critical infrastructure that powers modern civilization. Join Richard Campbell as he explores these undersea connections, how they are built, maintained, repaired, and continue to evolve. Modern events show that this infrastructure can be part of warfare, which has significant consequences for the world. Together, these intertwined data, electrical, and petrochemical networks form the hidden circulatory system of the planet—vital, complex, and increasingly essential to global stability and progress.

Read the whole story
alvinashcraft
30 seconds ago
reply
Pennsylvania, USA
Share this story
Delete

Coaching Organizations to Challenge the Beliefs Behind Agile Pressure | Kaloyan Chalakov

1 Share

Kaloyan Chalakov: Coaching Organizations to Challenge the Beliefs Behind Agile Pressure

Read the full Show Notes and search through the world's largest audio library on Agile and Scrum directly on the Scrum Master Toolbox Podcast website: http://bit.ly/SMTP_ShowNotes.

 

"What's happening with the team is just the symptom of what's happening with the whole system." - Kaloyan Chalakov

 

Kaloyan brings a common Scrum Master challenge: a team under pressure from a Product Owner who starts acting more like a project manager. Planning turns into a list of tasks, Daily Scrum becomes a status report, and pressure flows from customers and market competition, through management, to the Product Owner, and finally to the team. In the conversation, Vasco and Kaloyan map the system and notice something deeper than pressure: the belief that a competitor's release will directly damage the company unless the team moves faster. That belief becomes the real intervention point. Kaloyan reflects that Scrum Masters can challenge assumptions, turn beliefs into testable hypotheses, and introduce alternative beliefs that reduce pressure instead of passing it down. The practical insight is powerful: do not fight pressure by adding more pressure. Look for the source, test the assumptions behind it, and design small conversations that change the system around the team.

 

In this episode, we refer to systems thinking and limiting beliefs.

 

Self-reflection Question: What belief is creating pressure in your organization, and how could you test it with one small conversation this week?

 

[The Scrum Master Toolbox Podcast Recommends]

🔥In the ruthless world of fintech, success isn't just about innovation—it's about coaching!🔥

Angela thought she was just there to coach a team. But now, she's caught in the middle of a corporate espionage drama that could make or break the future of digital banking. Can she help the team regain their mojo and outwit their rivals, or will the competition crush their ambitions? As alliances shift and the pressure builds, one thing becomes clear: this isn't just about the product—it's about the people.

 

🚨 Will Angela's coaching be enough? Find out in Shift: From Product to People—the gripping story of high-stakes innovation and corporate intrigue.

 

Buy Now on Amazon

 

[The Scrum Master Toolbox Podcast Recommends]

 

About Kaloyan Chalakov

 

Kaloyan Chalakov spent years making high-stakes decisions at sea before moving into Agile and organisational change, bringing lessons from safety-critical systems into how modern teams work.

 

You can link with Kaloyan Chalakov on LinkedIn.





Download audio: https://traffic.libsyn.com/secure/scrummastertoolbox/20261028_Kaloyan_Chalakov_W.mp3?dest-id=246429
Read the whole story
alvinashcraft
35 seconds ago
reply
Pennsylvania, USA
Share this story
Delete

What Claude Code Can Do That You Haven't Tried - Gui Ferreira - NDC Oslo 2026

1 Share
From: NDC
Duration: 54:13
Views: 827

This talk was recorded at NDC Oslo in Oslo, Norway. #ndcoslo #ndcconferences #developer #softwaredeveloper

Attend the next NDC conference near you:
https://ndcconferences.com
https://ndcoslo.com/

Subscribe to our YouTube channel and learn every day:
/ @NDC

Follow our Social Media!

https://www.facebook.com/ndcconferences
https://twitter.com/NDC_Conferences
https://www.instagram.com/ndc_conferences/

#claude #claudecode #ai

You've installed Claude Code. You've asked it to write some code. You may have even let it refactor a file or two. But there's a good chance you're only scratching the surface.

In this session, I'll share what I've learned from using Claude Code daily and teaching it to developers in workshops. We'll go into the features that change how you work. Things like shaping Claude's behaviour through CLAUDE.md, building your own commands and skills, automating feedback loops, and understanding the small configuration details that most people overlook.

We'll also look at use cases beyond software development. We'll use Claude Code as an actual AI-assistant, not only a code-assistant.

This isn't a getting-started guide. It's a tour of the parts of Claude Code that only become visible once you stop treating it like an autocomplete tool.

If you use Claude Code but feel you're not getting the most out of it, this session will help you see what it can really do.

Read the whole story
alvinashcraft
39 seconds ago
reply
Pennsylvania, USA
Share this story
Delete
Next Page of Stories