42:I[185,["/_next/static/chunks/2ys9ev5m3_24i.js","/_next/static/chunks/3pomb8r7ja54n.js","/_next/static/chunks/42spz6paskvb6.js","/_next/static/chunks/178kgr5-cejk9.js","/_next/static/chunks/1v5ewlr55okcj.js","/_next/static/chunks/3jnlvw-emqotx.js"],"SendEmailButton"] 44:I[63625,["/_next/static/chunks/2ys9ev5m3_24i.js","/_next/static/chunks/3pomb8r7ja54n.js","/_next/static/chunks/42spz6paskvb6.js","/_next/static/chunks/178kgr5-cejk9.js","/_next/static/chunks/1v5ewlr55okcj.js","/_next/static/chunks/3jnlvw-emqotx.js"],"AddToLibraryButton"] 45:I[29721,["/_next/static/chunks/2ys9ev5m3_24i.js","/_next/static/chunks/3pomb8r7ja54n.js","/_next/static/chunks/42spz6paskvb6.js","/_next/static/chunks/178kgr5-cejk9.js","/_next/static/chunks/1v5ewlr55okcj.js","/_next/static/chunks/3jnlvw-emqotx.js"],"ShareButton"] 46:I[58016,["/_next/static/chunks/2ys9ev5m3_24i.js","/_next/static/chunks/3pomb8r7ja54n.js","/_next/static/chunks/42spz6paskvb6.js","/_next/static/chunks/178kgr5-cejk9.js","/_next/static/chunks/1v5ewlr55okcj.js","/_next/static/chunks/3jnlvw-emqotx.js"],"ProcessEpisodeButton"] 47:I[45269,["/_next/static/chunks/2ys9ev5m3_24i.js","/_next/static/chunks/3pomb8r7ja54n.js","/_next/static/chunks/42spz6paskvb6.js","/_next/static/chunks/178kgr5-cejk9.js","/_next/static/chunks/1v5ewlr55okcj.js","/_next/static/chunks/3jnlvw-emqotx.js"],"SignupCTA"] 3b:["$","h1",null,{"className":"max-w-[22ch] font-display text-[clamp(32px,4.5vw,48px)] font-medium leading-[1.05] tracking-[-0.02em] text-[color:var(--fg-1)] text-balance","children":"Creating Code Security Through Better Visibility - Christien Rioux - ASW #273"}] 3c:["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 font-mono text-[12px] uppercase tracking-[0.1em] text-[color:var(--fg-3)]","children":[["$","time",null,{"dateTime":"2024-02-13T18:46:00.000Z","children":"February 13, 2024"}],null,null,false]}] 43:T40c,

We've been scanning code for decades. Sometimes scanning works well -- it finds meaningful flaws to fix. Sometimes it distracts us with false positives. Sometimes it burdens us with too many issues. We talk about finding a scanning strategy that works well and what the definition of "works well" should even be.

Segment Resources:

https://www.lacework.com/blog/introducing-a-new-approach-to-code-security/

LLMs improve fuzzing coverage, the Shim vuln threatens Linux secure boot, considering AI application threat models, a new language for a configuration file format, and more!

Visit https://www.securityweekly.com/asw for all the latest episodes!

Show Notes: https://securityweekly.com/asw-273