App Development عمومي
[search 0]
أكثر
تنزيل التطبيق!
show episodes
 
Die programmier.bar lädt regelmäßig spannende Gäste aus der Welt der App- und Webentwicklung zum Gespräch ein. Es geht um neue Technologien, unsere liebsten Tools und unsere Erfahrungen aus dem Entwickler-Alltag mit all seinen Problemen und Lösungswegen. Euer Input ist uns wichtig! Schreibt uns eure Themenwünsche und Feedback per Mail an [email protected] oder auf Discord (https://discord.gg/SvkGpjxSMe), LinkedIn (@programmier.bar), Bluesky (@programmier.bar), Instagram (@programmier.b ...
  continue reading
 
Die Developer Akademie bildet dich zum Programmierer weiter. Auch wenn du noch NIE eine Zeile Code geschrieben hast, ist es möglich in 3 - 9 Monaten einen bezahlten Job zu finden. Dafür musst du nicht nur programmieren lernen, sondern einen guten Lebenslauf mit vielen verschiedenen Projekten vorweisen. In unserem Programm hast du ständigen Kontakt zu unseren Coaches, Hausaufgaben, Abgabefristen und Projekte aus der Praxis. Am Ende erstellen wir mit dir deinen Lebenslauf und unterstützen dich ...
  continue reading
 
Loading …
show series
 
Embedded Systems stecken heute in nahezu jedem Gerät. Moderne Autos, Spülmaschinen bis hin zu Flugzeugen würden ohne die verbauten Mikrocontroller nicht funktionieren. Doch wie genau entstehen eingebettete Systeme? Wie entwickelt man Software für Mikrocontroller und woher kommt die passende Hardware? Darüber sprechen Jan und Dennis mit Jakob Czekan…
  continue reading
 
OWASP Juice Shop went through some significant renovation and enhancements over the last year in order to keep current with the underlying Node.js and Angular frameworks. MultiJuicer was entirely rewritten in GoLang and is now faster and more reliable than ever before. All Juice Shop side-projects have been migrated to TypeScript and brought to a c…
  continue reading
 
Der Kurzvortrag stellt den aktuellen Stand der OWASP Top 10:2025 vor, mit etwas Glück haben wir bis dahin schon mehr...Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/about this event: https://c3voc.deبقلم Torsten Gigler
  continue reading
 
Der Cyber Resilience Act, kurz CRA, ist eine neue Verordnung der EU und tritt im Dezember 2027 vollständig in Kraft. Das Kernelement der Verordnung ist die Softwaresicherheit für alle so genannten „Produkte mit digitalen Elementen“, die auf dem EU-Markt kommerziell angeboten werden. Diese umfassen sowohl vernetzte Hardware-Produkte, in denen Firmwa…
  continue reading
 
Web application scanners are popular and effective black-box testing tools, automating the detection of vulnerabilities by exploring and interacting with user interfaces. Despite their effectiveness, these scanners struggle with discovering deeper states in modern web applications due to their limited understanding of workflows. This study addresse…
  continue reading
 
Coding Assistants wie Github Copilot, Cursor oder Claude versprechen einen Effizienzboost für die Softwareentwicklung. Doch welchen Einfluss hat die Nutzung dieser Tools auf die Software Security?Dieser Vortrag analysiert die Vor- und Nachteile von Coding Assistants in Hinblick auf die Sicherheit des entstehenden Codes. Er gibt einen Überblick über…
  continue reading
 
As a CISO (or any other security expert) in the area of AI, you can find yourself in increasingly challenging and sometimes bizarre AI-related situations not unlike Alice's adventures in Wonderland.Depending on whom you speak to, people either have high (inflated?) expectations about the (magic?) benefits of AI for security efforts, or try to expla…
  continue reading
 
We hacked 7 of the16 publicly-accessible YC X25 AI agents. This allowed us to leak user data, execute code remotely, and take over databases. All within 30 minutes each. In this session, we'll walk through the common mistakes these companies made and how you can mitigate these security concerns before your agents put your business at risk.Licensed …
  continue reading
 
Browser extensions are a powerful part of the Web ecosystem as they extend browser functionality and let users personalize their online experience. But with higher privileges than regular web apps, extensions bring unique security and privacy risks. Much like web applications, vulnerabilities often creep in, not just through poor implementation, bu…
  continue reading
 
Do you always read the documentation before using a function in your languages' standard library? This talk explores the attack surface of a special feature in PHP which is easy to misuse with unforseen consequences. The `extract` function allows to replace the value of local variables named after the keys in an array. Calling it with user-controll…
  continue reading
 
Model Context Protocol (MCP) is the latest hot topic in cybersecurity. Business wants it (AI is the new mantra), developers are excited (new toys, new code), and security teams are left to make it safe—often with already packed schedules. Let's treat it like just another Tuesday. Like many shiny new technologies (remember the early days of cloud?),…
  continue reading
 
Apple CarPlay is a widely known protocol that connects smartphones to car multimedia systems. Based on AirPlay, CarPlay is installed in millions of cars, as it is supported by hundreds of car models from dozens of different manufacturers across the globe. In our talk, we will share how we managed to exploit all devices running CarPlay using a singl…
  continue reading
 
Threat modeling stands at a critical juncture. While essential for creating secure systems, it remains mostly manual, handcrafted, and often too slow for today's development cycles. At the same time, automation and AI offer new levels of speed and scalability— but how much can we rely on them?This talk explores the tension between automation and hu…
  continue reading
 
In this presentation, we will highlight how threat modeling, as a proactive measure, can increase security in DevOps projects.We will introduce OWASP Cumulus, a threat modeling card game designed for threat modeling the Ops part of DevOps processes. This game (in combination with similar games like Elevation of Privilege or OWASP Cornucopia) enable…
  continue reading
 
WebAuthn was supposed to replace swords on the web: uniform, secure, manageable authentication for everyone! One of its unique selling points was supposed to be the impossibility of phishing attacks. When passkeys were introduced, some of WebAuthn's security principles were watered down in order to achieve some usability improvements and thus reach…
  continue reading
 
The future of authentication is passwordless - Passkeys are the key technology. This talk supports developers in implementing Passkeys in their organizations and helps with the decision between in-house development, SDK, or Passkey-as-a-Service solutions. You will learn how to design recovery flows and fallback mechanisms in a user-friendly way, ho…
  continue reading
 
The OWASP secureCodeBox project aims to provide a unified way to run and automate open-source scanning tools like nmap, nuclei, zap, ssh-audit, and sslyze to continuously scan the code and infrastructure of entire organizations.This allows setting up automated scans that will regularly scan internal networks and internet-facing systems for vulnerab…
  continue reading
 
Web application firewalls are often seen as a hindrance when going live, as perimeter WAFs can clash with GitOps-driven platforms. Empowering development teams with an application-centric WAF setup allows them to run and tune the WAF throughout the entire development lifecycle. It also enables full integration into any CI/CD pipeline or GitOps appr…
  continue reading
 
Die von LangSec beschrieben grundlegenden Sicherheitsprinzipien erklären die Hauptursachen vieler Sicherheitslücken und wie man diese beheben kann. LangSec sieht die anhaltende Schwachstellen-Epidemie in Software als eine Folge der ad-hock Entwicklung von Code, der Ein- und Ausgaben verarbeitet. Gemäß LangSec besteht der Schlüssel zur Entwicklung v…
  continue reading
 
Companies within the European Union are increasingly required to be able to issue and process electronic invoices according to EU standards. For example, since January 2025, companies in Germany have been required to support electronic invoices in B2B contexts.While it is desirable to standardize invoice data formats, the EU standards have severe p…
  continue reading
 
Security teams often inherit their organisation's structure - for better or worse. The way you design your AppSec programme and choose your team topology can determine whether security becomes a trusted enabler or a frustrating bottleneck.In this story-driven session, we follow Alex, who begins as the only security person in a 50-person startup. At…
  continue reading
 
With the increasing reliance on third-party software components, ensuring their security against known vulnerabilities has become a daily challenge for individuals and organizations. Despite the availability of a variety of tools and databases, we found all of them fall short when applied to real-world scenarios - raising questions about their effe…
  continue reading
 
Generative AI is supposed to make our lives easier. But what if it's really just coding us straight into a new Dark Age? We hand over our systems to AI agents, only to watch them invent backdoors nobody asked for. Developers are left with the glamorous job of bug janitors, while attackers get new exploits. It's hard not to feel like we are front-ro…
  continue reading
 
„KI ist gekommen, um zu bleiben”, sagt Dr. Peggy Müller. Die Anwältin unterstützt Unternehmen dabei, KI-Tools und Produkte der künstlichen Intelligenz rechtskonform einzuführen und zu nutzen. Gemeinsam mit Peggy und unserem wiederkehrenden Gast Richard Hartmann spricht Jan über die rechtlichen Fragen und Hürden, die bei der Integration von KI-Syste…
  continue reading
 
Bewerbung für ein Erstgespräch: https://bit.ly/3VXeR0B In der heutigen Folge verrät dir René sein persönliches 5-Schritte-System, um sich in neue Technologien einzuarbeiten. Ohne dabei die Nerven zu verlieren und ganz ohne Syntax! YouTube: https://www.youtube.com/c/Programmierenlernen Instagram: https://www.instagram.com/junus.ergin/…
  continue reading
 
Die neue Gemini-Familie wurde veröffentlicht: Gemini 3.0 hält Einzug in viele Google-Produkte und ist direkt zur Nutzung bereit. Philipp erzählt von seinen eigenen Eindrücken, die er bereits über die letzten Wochen sammeln konnte. Ein weiteres Tool im Zuge der Veröffentlichung ist Antigravity zur agentenzentrierten Entwicklung. Auch von Google komm…
  continue reading
 
Unser programmier.bar Crew-Mitglied Fabi war im Engineering Kiosk Podcast zu Gast und hat dort über seine Arbeit als Game Lead bei Lotum und das Thema Mobile Game Development gesprochen. Das ganze Gespräch mit Fabi und dem Team vom Engineering Kiosk Podcast findet ihr unter https://engineeringkiosk.dev/podcast/episode/221-mobile-game-entwicklung-mi…
  continue reading
 
Jährlich schreiben Hunderttausende Studierende ihre Bachelor-Arbeit in Deutschland, doch nur selten entsteht daraus ein ganzes Unternehmen. Fabian Haigen, CTO bei Faaren. hat genau das geschafft. Gemeinsam mit Kommiliton:innen gründete Fabian im Rahmen einer Projektarbeit eines der ersten deutschen Mobility-Start-ups für Auto-Abos. Aus dem studenti…
  continue reading
 
Bewerbung für ein Erstgespräch: https://bit.ly/47fZ7fv Heute vergleichen Junus und René ihren Arbeitsalltag als Softwareentwickler, denn im Gegensatz zu Junus arbeitet unser Software-Entwickler René, so wie viele andere unserer Programmierer auch, 100% remote. Was sind Vor- und Nachteile komplett von zu Hause aus zu arbeiten? YouTube: https://www.y…
  continue reading
 
Am 20. November steht das nächste Meetup der programmier.bar an, meldet euch jetzt an und erfahrt alles über Headless Apps! Ihr habt die programmier.con 2025 - Web & AI Edition verpasst, aber wollt das nächste Mal unbedingt dabei sein? Dann nehmt jetzt an unserem Call for Papers teil und sichert euch einen Platz als Speaker:in auf unserem Event in …
  continue reading
 
As GodotFest 25 comes to a close, we’ll wrap up the conference with final thoughts, highlights from the past two days, and thank everyone who made this event possible.We’ll celebrate the amazing talks, workshops, and connections made throughout the conference, recognize our sponsors and volunteers, and look forward to the future of the Godot commun…
  continue reading
 
Godot has grown from a community passion project into a real alternative for professional studios. The 4.x series brought the technical groundwork — a modern renderer, new architecture, and steady performance improvements — that make larger productions viable. Now the next milestones aren’t just in the engine itself but in the surrounding ecosystem…
  continue reading
 
Ready to unlock the next level of your Godot development? Just like New Game+ adds exciting features to enhance replay value, adding backend capabilities transforms your games from single-player experiences into connected, community-driven platforms. In this talk, we'll explore how to level up your Godot projects with robust backend features like r…
  continue reading
 
While working on Dome Keeper and PVKK over the past year and a half, people often ask me what I love most about Godot. My answer is always the same: productivity. In this talk I'll discuss why Productivity is even more important for indie game development than many realize and what makes Godot so good at it IF you know how to harness it. I’ll share…
  continue reading
 
Unlock the **secrets of interactive music** in Godot and learn how to bridge the gap between game developers and audio creators. In this session you will discover how to use adaptive scores to transform your _gameplay_, boost the _immersion_, _replayability_, and _emotional impact_ of your project through **adaptive audio**. Covering all the _basic…
  continue reading
 
Many Godot developers push mobile to the end of their roadm - if they consider it at all. The common pattern: build for desktop, ship on Steam or itch, and think about mobile later if the project takes off. In this talk, we’ll explore how and why developers should start thinking about mobile earlier in their process.Mobile represents the largest ga…
  continue reading
 
The age-old wisdom for adding multiplayer to a complex single player game is: Don't.This talk will cover how we added mixed local and online multiplayer to an existing codebase of tens of thousands of lines of GDScript and how you can think about systems in your game to do the same.Licensed to the public under https://creativecommons.org/licenses/b…
  continue reading
 
As the last of the "big 3" engines still lacking an officially-supported FMOD integration plugin, Godot offers a unique working environment for sound designers and composers utilizing FMOD. In this talk, I would like to explore the advantages and disadvantages this presented when making music and SFX as a one-man audio department for the roguelike …
  continue reading
 
2D games often struggle to match the visual appeal of 3D games, since they can't use common lighting techniques. However, these effects can be created with quite simple shaders, and they perform much better than the 3D counterparts.In this talk, I will share the lighting techniques I have implemented for my game, Blastronaut, including the new 2D r…
  continue reading
 
This talk explores the powerful capabilities and practical challenges of working with Godot’s tilemap system, drawing from real-world experience building an open world game. From optimization techniques that keep large worlds running smoothly to the underutilized Scene Tiles feature, you’ll learn how to leverage tilemaps beyond basic level design. …
  continue reading
 
Godot is growing fast, but when it comes to web game development, is it really ready for production? In this talk, I’ll explore the current state of Godot Web, focusing on what works, what breaks, and what’s missing for real-world use.I’ll walk through the actual release of a game I published on CrazyGames, sharing what it took to make it work (cus…
  continue reading
 
A talk aimed at non-artists that covers "how to art direct". We will cover basics like lighting, colors and shape language. But also teach how to stylize, what the difference between a moodboard and a reference board is and just general art knowledge that will be helpful for programmers, gamedesigners and leveldesigners.Licensed to the public under…
  continue reading
 
Which platform should you ship and when should you branch out? This panel brings together perspectives from web, PC storefronts, consoles, and mobile to compare the main paths and what they typically ask of a Godot project. We’ll talk about assessing platform fit, what “ready for console” really looks like, how challenging different routes can be, …
  continue reading
 
Loading …

دليل مرجعي سريع

حقوق الطبع والنشر 2025 | سياسة الخصوصية | شروط الخدمة | | حقوق النشر
استمع إلى هذا العرض أثناء الاستكشاف
تشغيل