WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2022 • Jun 15, 2022

Don't Be A Naive Developer: How To Avoid Basic Cybersecurity Mistakes

Tino Sokic

Information security expert Tino argues that 90% of breaches stem from human error, not tech. Learn to ditch the 'it works' fallacy and fix your naive coding habits.

Pause
Mute Enter Fullscreen
#1 about 6 min

Prioritizing security and risk over basic functionality

Focusing purely on making code work often causes teams to overlook critical risk management and secure implementation practices.

#2 about 3 min

Understanding the differences between developers and programmers

There is a distinct difference between programmers who specifically write code and developers who manage broader project responsibilities.

#3 about 3 min

Inherent security flaws in legacy internet protocols

Foundational internet protocols like DNS and BGP were originally built for simple network connectivity rather than robust security.

#4 about 4 min

Applying the ninety ten rule to cybersecurity

Effective cybersecurity defense depends only slightly on technical mechanisms and predominantly on human awareness and daily behavior.

#5 about 3 min

Social engineering risks associated with private email usage

Using personal email accounts for professional development communications creates direct vulnerabilities to targeted social engineering and phishing attacks.

#6 about 2 min

Overconfidence and poor secret management in software

Deploying untested code and relying on easily guessable passwords represent fundamental and avoidable failures in modern software development.

#7 about 2 min

Physical security risks and shared development accounts

Shoulder surfing in public spaces and distributing shared access credentials are significantly overlooked physical security hazards for remote teams.

#8 about 1 min

Security vulnerabilities from unnecessary third party libraries

Importing massive external functional libraries for minor programmatic needs carelessly introduces unpatched structural flaws into production applications.

#9 about 1 min

The downsides of promoting engineers to management roles

Promoting top technical programming talent directly into team leadership roles frequently causes serious role misalignment and engineering retention issues.

#10 about 4 min

Balancing business expectations with secure software development

Rigid business expectations and nonnegotiable delivery milestones consistently restrict the realistic implementation of secure application structures.

Matching moments

55 sec

Setting the scene for real-world cybersecurity failures

Jasmin Azemović Jasmin Azemović · World Congress 2026 Europe

5:30 min

Identifying non-coding software vulnerabilities and organizational risks

Tino Sokic · World Congress 2023

2:30 min

Bridging the gap between developers and security tools

Bozidar Spirovski Bozidar Spirovski +1 · Coffee With Developers

1:34 min

Elevating basic developer security knowledge for rapid wins

Isaac Evans Isaac Evans · World Congress 2025

2:05 min

Making security a foundational feature in software development

Eileen Uchitelle Eileen Uchitelle +1 · Coffee With Developers

7:16 min

Addressing developer adoption and future software security risks

Anna Fritsch-Weninger · LIVE

More from World Congress 2022

What the heck do "declarative" and "reactive" actually mean? thumbnail
30:40
about 4 years ago

What the heck do "declarative" and "reactive" actually mean?

André Kovac

The Design and Evolution of C++ thumbnail
1:01:15
about 4 years ago

The Design and Evolution of C++

Bjarne Stroustrup

But, you're not Facebook thumbnail
31:12
about 4 years ago

But, you're not Facebook

Kristijan Ristovski

Communicate efficiently with Software Architecture Diagrams thumbnail
28:11
about 4 years ago

Communicate efficiently with Software Architecture Diagrams

Simon Lasselsberger

Get Ready for Jakarta EE 10! thumbnail
42:53
about 4 years ago

Get Ready for Jakarta EE 10!

Ivar Grimstad

Keep your code refactorable thumbnail
26:46
about 4 years ago

Keep your code refactorable

Gerrit Stapper

Upcoming sessions on this topic

Open session

World Congress 2026 North America

September 25, 2026 · 09:00–09:30

Stage 4

Don’t kill my Vibes - Simple Steps to Stay Secure when Vibe Coding

Isaac Evans

Founder & CEO of Semgrep

Isaac Evans
Open session

World Congress 2026 North America

September 25, 2026 · 13:30–14:00

Stage 9

On the Public Clock: Open-Source Defense When You're Not in the Club

Nicholas Muy

VP Engineering Platform and Security at Scrut.io

Nicholas Muy
Open session

World Congress 2026 North America

September 25, 2026 · 11:00–11:30

Stage 6

Secure-by-Inclusion: Preventing Accessibility Barriers from Becoming Security Vulnerabilities

Radostina (Ina) Tsvetkova

Norwegian Directorate of Labour and Welfare (NAV), Senior Advisor in Digital Accessibility and Inclusive Design

Radostina (Ina) Tsvetkova
Open session

World Congress 2026 North America

September 25, 2026 · 16:50–17:20

Stage 5

The Things Your AI Isn't Telling You

Desmond Lamptey

Lead Software Engineer at Capital One

Desmond Lamptey
Open session

World Congress 2026 North America

September 24, 2026 · 16:00–18:00

Stage 13

Practical Threat Modeling for Software Developers

Mudassir Syed

Lead Security Software Engineer

Mudassir Syed
Open session

World Congress 2026 North America

September 25, 2026 · 15:00–17:00

Stage 12

Secure development from pull request to production with GitHub

Sam Jarvinen

Senior Solutions Engineer, GitHub

Sam Jarvinen

Related videos

Unleashing the Power of Developers: Why Cybersecurity is the Missing Piece?!? thumbnail
27:36
World Congress 2023 • almost 3 years ago

Unleashing the Power of Developers: Why Cybersecurity is the Missing Piece?!?

Tino Sokic

Simple Steps to Kill DevSec without Giving Up on Security thumbnail
21:53
World Congress 2025 • about 1 year ago

Simple Steps to Kill DevSec without Giving Up on Security

Isaac Evans

How to Defend Against Data Manipulation Attacks - Bozidar Spirovski & Wekoslav Stefanovski thumbnail
38:44
Coffee With Developers • 6 months ago

How to Defend Against Data Manipulation Attacks - Bozidar Spirovski & Wekoslav Stefanovski

Bozidar Spirovski, Wekoslav Stefanovski

Software Security 101: Secure Coding Basics thumbnail
1:58:48
World Congress 2021 • about 5 years ago

Software Security 101: Secure Coding Basics

Thomas Konrad

Checkmate: 5 Real Incidents That Can End a Software Company thumbnail
27:08
World Congress 2026 Europe • 2 months ago

Checkmate: 5 Real Incidents That Can End a Software Company

Jasmin Azemović

Security Pitfalls for Software Engineers thumbnail
27:32
World Congress 2023 • almost 3 years ago

Security Pitfalls for Software Engineers

Jasmin Azemović

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.