tuts

Welcome to the AskDeveloper Podcast, in this podcast Tamer Zaki & Mohamed Elsherif are discussing the many software related issues especially in the Egyptian technology market, and how to change the culture for companies and development teams to adopt the right methodologies and processes.

Our theme music is provided by www.podcastthemes.com

AskDeveloper Podcast

podcast

امن معلومات

Ask Developer

Ask Developer - Cryptography

CipherVerse

الحلقة الثلاثون من راديو اسأل مطور, في هذا الأسبوع نطرح دور الDevOps في تطوير المؤسسات

What is the role of DevOps?
 "Automate All Things"
A role currently related to Online Services.
The principle of self-serve IT
Streamline and Automate Operation tasks
 Monitoring & Alerting
 Deployment
 Scaling up & down
 OS\Platforms upgrades, patches ... etc
 Building internal platforms to facilitate many IT related jobs
  Creating virtual machines
  Assigning DNS's
  Configuring load balancers \ software load balancers
  Self-Serve deployment
Technologies 
 All virtual machine automation software
 Chef http://www.getchef.com/
 Puppet http://puppetlabs.com/
 Salt http://docs.saltstack.com/index.html
 Graphite http://graphite.wikidot.com/

EP30 - DevOps

ِAsk Developer Podcast الحلقة 34, في هذه الحلقة نناقش موضوع ال Freelancing و كيف تبدأ فيه و ما هو و مميزاته و عيوبه و بعض النصائح من التجارب الشخصية.
What is freelancing? 
Comparing freelancing to regular job
How to find freelancing opportunity? 
How to handle clients? 
How to put your name out there? 
Places To look for freelancing opportunities. 
 Rentacoder
 Guru

Video version
https://www.youtube.com/watch?v=k-562HWe1N4


EP34 - Freelancing

الحلقة السادسة و الثلاثون من راديو اسأل مطور, نناقش في هذا الأسبوع أهمية نظم حفظ و تنظيم الكود Source Control و نقارن بين أنواعها المختلفة و نتكلم باستفاضة عن Git

What is source control
Why do I need Source Control
Source control absence from official CS curriculum is a disaster
Source control can be as important as If Else statements
Important for individuals. Vital for teams
Types of Source Control Systems
	Centralized (Traditional)
		CVS
		SVN - Subversion.
		TFS
	Distributed
		Git
		Mercurial 
Awesome Git Features
	Stash
	Branching with no overhead
	Local Commits (never lose a thing)
	Rewriting History (rebasing)
Git vs GitHub
	GitLab
	Bitbucket
Using GitHub in non-programming projects


EP36 - Source Control And Git

Introduction
What is a package?
What is a Package Manager?
Why Do we need Package Manager?
Pros and Cons
	Pros
		Break your code into sharable components.
		Reduce build times.
		Easy to find well-made packages to speed up development.
		Resolving versioning in a clean way.
	Cons
		Sometimes packages don't play well together
		Too many package managers with very little differences
Examples
	Ruby Gems (was that the first one?)
	Python Pip
	NuGet
	NPM
	apt-get
	OneGet
	Chocoloty
	Bower
	Yum
	pacman


EP38 - Package Managers

On June 10, The Institute of World Politics welcomed Andres Kütt, Head Software Architect, and Liina Areng, Head of International Relations, both of the Estonian Information System Authority to speak on the state of cyber security globally, as well as their country’s pioneering transition to electronic governance. Mr. Kütt and Ms. Areng generously offered their time and expertise to inform the IWP community about the importance of a rapidly changing cyber landscape. 

Mr. Kütt told the audience how there is a constant war being waged between the governments, corporations, and organizations that secure private data and the rogue criminal hackers who seek to steal it from their databases. In reality, he said, there is not a guaranteed method of securing online data in this modern era. Rather, there are differing levels of coding sophistication and mathematical formulas by which cryptographers and cyber attackers engage in their web-based warfare. 

Mr. Kütt explained how, essentially, this worldwide data conflict is driven by secure codes and encryptions that protect data and the efforts by rogue states or actors to disrupt them. Time, he says, is the worst enemy of cryptographers, as their electronic battlements are constantly under siege. The most effective way to mitigate the risk of cyber attack, he noted, is to hire the most talented pool of cyber defenders. 

Mr. Kütt and Ms. Areng informed the audience that governments are at the forefront of the cyber challenges that face the 21st century. The Republic of Estonia in particular has been a global leader in so-called “E-governance,” transforming their Baltic nation of 1.3 million into a cyber powerhouse. Estonia, they report, has been highly successful in its endeavor to render the services and obligations of government into electronic models. For example, Estonia is the only one of its kind in the world to have institutionalized E-voting in national elections. This kind of groundbreaking civic engagement, the speakers emphasized, is dependent on a high degree of trust in its accuracy and incorruptibility. 

Mr. Kütt and Ms. Areng explained how the Estonian government relies on its advanced corps of citizen-cryptographers. The Cyber Defense League was established in 2010 as a response to the unprecedented cyber attacks on the country years earlier. This organization of volunteer cryptographers serves the national cyber defense by donating their talents in service to Estonia. 

Mr. Kütt and Ms. Areng went on to explain the interconnectedness of the digital ecosystems that populate the Internet. What affects one facet of the web is sure to translate into tangible consequences for the other. Further, the immense difficulty in identifying the origins of a cyber attack means that a coherent, reliable encryption is increasingly the only viable avenue of defense. 

Cryptography And Trust- Estonia And The Modern Information Society

	• What's wrong with the world as it is today?
		○ Gatekeepers and Walled Gardens 
		○ The Master Switch by Tim Wu
			▪ Tim Wu is the one who coined the Net Neutrality term.
			▪ This book tells the story of how every communication medium starts a revolution that upsets the order, then eventually it gets controlled. The same thing could happen to the Internet.
	• Bitcoin
		○ Is this about money, or about technology
		○ Is this about the technology or bitcoin, or the technology of distributed money.
		○ How Bitcoin works. Video.
		○ Bitcoin mining in plain English.
	• Blockchain
		○ permissionless distributed database based on the bitcoin protocol that maintains a continuously growing list of data records hardened against tampering and revision, even by its operators. The initial and most widely known application of block chain technology is the public ledger of transactions for bitcoin, which has been the inspiration for similar implementations often known as altchains
		○ Trustless transactions
		○ Simple explanation of how Blockchain works.
	• Distributed hash tables
		○ class of a decentralized distributed system that provides a lookup service similar to a hash table
	• Git
		○ Git GPG Signature
	• BitTorrent
	• IPFS: Inter-Planetary File System
		○ Intro to IPFS 
		○ IPFS: Why We Must Distribute the Web (Video)
		○ How to Use IPFS to fix NPM
		○ HTTP is obsolete. It's time for the distributed permanent web
			▪ This page is actually served via IPFS
It covers important points: how IPFS does mutable data, how it does human-readable URLs.

EP45 - A little bit about Bitcoin

يسعدني متابعتكم على قناتيّ اليوتيوب
Ereiny Samir 1 إيريني سمير 
https://www.youtube.com/@ereinysamir1661/videos
Ereiny Samir 2 إيريني سمير 
https://www.youtube.com/@ereinysamir2:

استمع أيضًا إلى كتاب صوتي جديد درامة إذاعية رواية "دعاء الكروان" لعميد الأدب العربي طه حسين .. مع موسيقى الموسيقار "أندريا رايدر" ولأول مرة كتب صوتي مصور حيث يعرض الكتاب بصورة بانوراما مصورة مستوحاة من فيلم دعاء الكروان للمخرج هنري بركات .. يسعدني متابعتكم ومساعدتكم لنشر الأعمال .. اللينك للاستماع
https://www.youtube.com/watch?v=FJc6xqgZgJc&t=308s


كتاب جديد رواية "كــــــــــارمـــــــــــن" مسموعة دراما صوتية
https://www.youtube.com/watch?v=bXcx6gNT1OE&t=5032s

كتاب جديد مسموع: القضية الغريبة لدكتور جيكل والسيد هايد
اللينك: https://www.youtube.com/watch?v=zdRGGeydKn8

للاستماع لمزيد من الكتب والاعمال الفنية برجاء متابعة قناة اليوتويب
https://www.youtube.com/channel/UCsaodPR_owNlg-qMWgbEQqg?view_as=subscriber
وصفحة كتاباتى واعمالى الفنية الفنية على الفيسبوك
https://www.facebook.com/ARES4EROS/

يرجى متابعة قناتي الجديدة (الثانية على اليوتيوب) للاستماع للأعمال الجديدة المتنوعة ..و عليها يتم تقديم الأعمال بإسلوب القراءة التعبيرية وتهتم بمجالات مختلفة منها الأعمال الأدبية والثقافية وقراءة الأبحاث العلمية .. بدون موسيقى ... اللينك 
https://www.youtube.com/@ereinysamir2/videos

الكتاب المسموع حلم رجل مضحك بأداء ايرينى سمير
The Dream of a Ridiculous Man book by FYODOR DOSTOEVSKY
Vocal Performance by Ereiny Samir
للروائى العالمى فيودور دوستويفيسكى
اداء صوتى وتسجيل إيرينى سمير
هندسة صوتية آندرو عريان

هل تذوقت يوما زيارات النور؟
هل طرق باب رغبتك الانتحار مرة؟
هل اكترث لك احدهم؟
هل عاونتك السماء؟
هل نبذت حتى من نفسك؟
هل لمستك يوما قوة العودة من اليأس؟

ربما اذا حملت بداخلك ايا من تلك المشاعر او عصفت بكيانك احدهم .. سيعنيك هذا الكتاب
والذى حاولت ان اقدمه بحقيقة ما احتواه من فشل ونجاح بشرى وما يحمله من سقوط وقيام انسانى
ففى مصداقية ادبية كُتِب وبمصداقية انسانية قُرئ

كان هذا اول كتاب اقرأه لهذا الروائي الخاص جدا فى الموهبة الادبية فكريا ونفسيا وروحيا، وهو احد الاعمال الفنية التى اعتز بتنفيذها، فأسعدنى ان اقرأه مشاركة معه وتعبيرا عنه وعنى، واسجله بهاتفى الضعيف وان اقدمه بإمكانياتى المعدمة، وحاولت مجاهدة ان اعبر عما يحويه ببساطة تقديم لما وجدته من كنز انسانى وروحى فى كتاب وفى موسيقى، واشكر الفنان آندرو عريان لمساعدتى فى تنفيذ الهندسة الصوتية للعمل، واتمنى ان يكون هذا الكتاب المسموع لمسة نور لمن يسمعه.

ايرينى سمير

لينك الكتاب على الفيسبوك
********************
https://www.facebook.com/ARES4EROS/videos/vb.676897835779586/842467642555937/?type=2&theat

لينك الكتاب على اليوتيوب
https://www.youtube.com/watch?v=UKhxADvfq9I

كتاب مسموع جديد بطريقة تمثيلية .. دراما صوتية "القضية الغريبة لدكتور جيكل اولسيد هايد"
https://www.youtube.com/watch?v=zdRGGeydKn8
my page on facebook صفحتى الخاصة باعمالى الكتابية (الادبية والصحفية) والاعمال الفنية المسرحية (وغيرها) على الفيسبوك 
https://www.facebook.com/Ereiny-Samir-Writings-and-Artworks-Page-676897835779586/?fref=ts

#فيودور #دوستويفيسكى

الكتاب المسموع حلم رجل مضحك لدوستويفيسكى بأداء ايرينى سمير

Information Security
 1. Introduction
  ○ Security by obscurity
   § Steganography
    □ Hiding data inside another form of data, like using non-used bits in image to hide a message
     § Cool, but not practical.
     § Disadvantages
      ◊ Algorithm secrecy vs. key secrecy
  ○ Cryptography is everywhere and yet if done right, you can barely see it.
  ○ Goals: 
   § Confidentiality
    □ Secrets stay secret.
   § Integrity
    □ Data is not tampered with.
   § Non-Repudiation
    □ No party can deny sending messages.
   § Authentication
    □ Each party can ensure that the sender is what they expect.
  ○ Cryptography
   § Hashing
   § Encryption
   § Signing
   § Protocols
  ○ Random Number Generators
   § Extremely important, almost all encryption/hashing strength is affected by how random the random number generator is.
   § Don't use simple random number, use a cryptographic random number generator with a sophisticated source of entropy.
   § Pseudorandom number generator
   § Dual_EC_DRBG random generator backdoor
 2. Body
  ○ Hashing (one Way)
   § Properties
    □ Fixed length output no matter what size the input was
    □ Very easy to compute the hash of a given message, however very hard to compute from a hash the corresponding input.
    □ Mathematically infeasible to generate a message that has a given hash
    □ Any modification to a message produces a completely different hash that has no relationship to the original message's hash.
    □ It is mathematically infeasible to find two messages with the same hash. Hash Collision
   § Hashing Functions
    □ Provides data integrity, however lacks authentication
    □ Examples
     ® MD5 
      ◊ Considered Insecure
     ® Secure Hash Family SHA-X, Sha-1, Sha-2 [Sha256, Sha512], Sha-3
      ◊ Sha-1 is considered insecure.
      ◊ Sha-1, Sha-2 designed by NSA
      ◊ Sha-3 is not designed by NSA, Competition winner.
    □ Attacks
     ® Brute force
      ◊ CPU's are getting faster and cheaper every day.
      ◊ GPU's are getting faster and cheaper every day.
      ◊ Special Hash calculating hardware is becoming more available especially with the BitCoin push.
     ® Rainbow table attacks
      ◊ Pre-Calculated tables where you can reverse lookup a hash to a value
      ◊ Try www.crackstation.net
   § Hash Message Authentication Codes (HMAC)
    □ Adds authentication to integrity
    □ Can be used with all previous algorithms, HMACMD5, HMACShA1, HMAC256 … etc.
   § Salted Hash
    □ Adds random salt to mitigate rainbow table
    □ Salts are unique per record, and not a secret.
   § Password Based Key Derivation Function (PBKDF2)
    □ RSA Public Key Cryptographic Standard PKCS #5 Version 2.0
    □ Internet Engineering Task Force RFC 2898 Specification
     ® Adds a lot of iterations to slow it just enough to mitigate brute force (default 50,000 iterations)
     ® Adds random salt to mitigate rainbow table
    □ Disadvantage: It can be easily implemented with hardware which makes it vulnerable to bruteforce even with high number of iterations
   § Bcrypt
    □ Password Hashing function
    □ State of the art password hashing
   § Usages
    □ Integrity Check
Password Storage

Our facebook Page
http://facebook.com/askdeveloper

On Sound Cloud
http://soundcloud.com/askdeveloper

Please Like & Subscribe

EP46 - AskDeveloper Podcast - Cryptography - Part 1 - Introduction and Hashing

الحلقة السابقة 
https://soundcloud.com/askdeveloper/ep46-askdeveloper-podcast-cryptography-part-1-introduction-and-hashing
○ Encryption (Two Ways)
   § Symmetric Encryption
    □ Same key both encrypts and decrypts the data.
    □ Very fast, yet exchanging key is tricky
    □ Very Algorithmic
    □ Examples
     ® DES Data Encryption Standard (BROKEN)
      ◊ Uses key of 56 bit length
     ® Triple DES (3DES)
      ◊ Uses three keys (or two unique keys) of 56 bit each
     ® AES Advanced Encryption Standard
      ◊ Uses keys of 128, 192 or 256 bits long
    □ Attacks
     ® Brute force
      ◊ Usually mitigated via increasing key length, as difficulty increases exponentially as key size increases, for example time to crack given a modern super computer.
      Key Size Time To Crack
      56 bits 399 seconds
      128 bits 1.02 * 1018 years
      192 bits 1.87 * 1037 years
      256 bits 3.31 * 1056 years
      ◊ Side-Channel Attacks
   § Asymmetric Encryption
    □ Key pairs have mathematical relationship
    □ Each one can decrypt messages encrypted by the other.
    □ Slow, but exchanging key is trivial
    □ Very Mathematical
    □ Anyone can know the Public Key
     ® The Public key can only be used to encrypt data
    □ The Private key is kept secret, and never leaves the recipient's side.
     ® The Private key can only be used to decrypt data
    □ Examples
     ® RSA (Rivest, Shamir and Adelman)
     ® The de-facto standard in the industry
     ® Public and Private keys are based on large Prime Numbers
   § Hybrid Encryption
    □ Uses both Symmetric and Asymmetric encryption at the same time.
    □ Goals:
     ® Use the performance of Symmetric Crypto 
     ® Convenience of sharing keys using Asymmetric Crypto
     ® HMAC for authentication.
    □ Steps: (Order is very important)
     ® Party 1 (Alice)
      1. Generates a random AES Session Key (32 bytes / 256 bits)
      2. Generates a random Initialization Vector (IV) (16 bytes / 128 bits)
      3. Encrypt the message to be sent using the AES Session Key & IV
      4. Calculate an HMAC of the encrypted message using the AES Session key
      5. Encrypt the AES Session Key using the Public Key of Party 2 (Bob) The recipient.
      6. Sends a packet of (Encrypted Message, Encrypted Session Key, Initialization Vector, and HMAC) to Bob
     ® Party 2 (Bob)
      1. Decrypts Session key using his Private Key
      2. Recalculates the HMAC of the encrypted message (Validates message integrity)
       } If HMAC check pass
        – Decrypts the message using the decrypted AES Session Key and Initialization Vector
       } Otherwise, rejects the message because of integrity check failure.


Our facebook Page
http://facebook.com/askdeveloper

On Sound Cloud
http://soundcloud.com/askdeveloper

Please Like & Subscribe

EP47 - AskDeveloper Podcast - Cryptography - Part 2 - Encryption

○ Digital Signatures
   § Goal: verify Authenticity of a message.
   § Based on Asymmetric Cryptography.
   § Basic operations
    1. Public / Private keys generation (using some algorithm like RSA)
    2. Signing algorithm using the private key
    3. Signature verification algorithm using the corresponding public key
   i. Extending previous Example
    • Steps (Order is very important, bold stuff is the difference added to authenticate sender)
     ® Party 1 (Alice)
      1. Generates a random AES Session Key (32 bytes / 256 bits)
      2. Generates a random Initialization Vector (IV) (16 bytes / 128 bits)
      3. Encrypt the message to be sent using the AES Session Key & IV
      4. Calculate an HMAC of the encrypted message using the AES Session key
      5. Encrypt the AES Session Key using the Public Key of Party 2 (Bob) The recipient.
      6. Calculate Signature using the private signing key on the HMAC
      7. Sends a packet of (Encrypted Message, Encrypted Session Key, Initialization Vector, HMAC, and Signature) to Bob
     ® Party 2 (Bob)
      1. Decrypts Session key using his Private Key
      2. Recalculates the HMAC of the encrypted message (Validates message integrity)
       } If HMAC check pass
        – Verify digital signature using Alice Public Key
         w If signature verification pass
          w Decrypts the message using the decrypted AES Session Key and Initialization Vector
         w Otherwise, identity of the sender couldn't not be verified, reject message.
       } Otherwise, rejects the message because of integrity check failure.
    • Why Order matters?
     ® Timing Side-Channel Attacks
     ® Padding-Oracle Attack
     
  ○ Protocols
   § TLS/SSL
    • How TLS/SSL Works?
    • Mitigates against
     ® Man in the Middle Attacks
     ® Authentication, so the client can be sure it is talking to the correct destination.
   § Public Key Infrastructure (PKI)
    • Certificates aka X.509 Certificate (Sha-1 Signature Issues)
     ® A digitally signed file
     ® Identifies (Computer / User / Device)
     ® Has Public & Private Key, only the certificate owner has the Private Key.
     ® Has Expiration date
     ® Information about the CA that issued the cert 
     ® X.509 Extension Attributes (like Usage attribute)
     ® Revocation Information.
    • Certificate Authority (CA) (CNNIC, WoSign)
     ® Issues, signs and manages certificates.
     ® Famous certificate authorities (Verisign, GoDaddy, … etc).
    • Trust Chains
     ® CA's can delegate the signing job to subordinate CA's
      ◊ Root CA's signs an intermediate signing certificate to the subordinate CA
     ® The subordinate CA can then issue certificates
     ® To validate a certificate, the client validates the signatures of all the intermediate stages and make sure all of them are linked to a Trusted CA
    • Certificate Revocation Lists (CRL's)
     ® When a certificate is compromised (Private Key leaked) it will be published on the CRL, so each time the cert is validated, the CRL list is checked in case cert is revoked.
 3. Takeaways
 4. Books
  a. Understanding Cryptography: A Textbook for Students and Practitionershttps://www.amazon.com/Understanding-Cryptography-Textbook-Students-Practitioners/dp/3642041000


Our facebook Page
http://facebook.com/askdeveloper

On Sound Cloud
http://soundcloud.com/askdeveloper

Please Like & Subscribe

AskDeveloper Podcast - 49 - Cryptography - Part 3 - Digital Signaures and Protocols

ابدأ بـ"لماذا" هو الكتاب الذي نناقشه خلال هذه الحلقة من البودكاست. اعتدنا في البودكاست أن نقدم مناقشة شهرية لأحد الكتب التي رشحها لنا ضيوف البودكاست، والتي كان لها أثراً في تشكيل فكرهم أو كفاءتهم في العمل.



ابدأ بـ" لماذا"  هو ترشيح من مصطفى النحوي مؤسس "إنكا" وضيفنا في  البودكاست.  فنعرض خلال الحلقة أهم الأفكار التي عبر عنها سايمون سينك مؤلف الكتاب، عن أهمية معرفة الغرض بشكل واضح من أي عمل تقوم به. يركز سايمون سينك المحاضر الإنجليزي بشكل أكبر خلال كتابه على أهمية الغرض بالنسبة للشركات. فيعرض العديد من الأمثلة التي توضح العلاقة المباشرة ما بين اتخاذ الغرض كأساس لاتخاذ القرارت في الشركة، وما بين النتائج التي تحققها من أرباح، ورضا من العملاء، إضافة إلى بيئة عمل صحية تزيد من ولاء الموظفين للشركة، وتضمن كفاءة أعلى في العمل.

The Increasing Life Podcast: The Science of Achievement | Success | Happiness

Show Notes

TIL 055: Start With Why | "ابدأ بـ"لماذا

خالد بشارة المؤسس، والمدير التنفيذي لشركة لينك دوت نت ، هو ضيفنا في حوار ممتع من البودكاست. خالد بشارة يشغل حالياً منصب المدير التنفيذي لشركة أوراسكوم للفنادق والتنمية، كما أنه الشريك المؤسس لشركة Accelero Capital للاستثمار والإدارة.

في ديسمبر من عام 2003 اختارته مجلة Business Today كأفضل تنفيذي للعام وجاء على رأس قائمتها لأفضل أربعين مدير تنفيذي تحت الأربعين.

خلال مسيرته المهنية، بعدما ترك إدارة لينك دوت نت في عام 2005 تولى العديد من المناصب الهامة في إدارة كبرى الشركات العالمية مثل "ويند" للإتصالات في إيطاليا، وشركة أوراسكوم للإتصالات القابضة وغيرها من المحطات الهامة في مشوارها والني أثبت خلالها جدارة بكل منصب توّلاه، وحقق نتائج متميزة.

بودكاست حياة اكتر

دروس في بناء فريق العمل وبداية لينك دوت نت –  حوار مع خالد بشارة

كيف تغير حياتك مستخدماً منهجاً علمياً يساعدك على التعرف على بدائل عديدة يمكنك القيام بها لتحقيق النمو والسعادة في مختلف جوانب حياتك؟ هذا ما قدمه اثنان من أساتذة التصميم في جامعة ستانفورد، بيل بيرنت وديف ايفانز، بتطبيق المنهج المستخدم في الفكر التصميمي، للعمل على احدى المسائل الأكثر تعقيداً التي يواجهها الإنسان في حياته، وهي مسألة الحياة.

خلال الحلقة يشاركنا المهندس أحمد بيومي بدروس من البرنامج الدراسي الأكثر شعبية في جامعة ستانفورد والمختص بتصميم الحياة. أحمد بيومي يشغل حالياً منصب مدير التسويق في شركة حديد المصريين. وهو المؤسس لـ Hive شركته الناشئة في مجال التدريب.

TIL 061: كيف تغير حياتك باستخدام منهج ستانفورد للتصميم –  حوار مع أحمد بيومي

حلقة حماية بودكاست بعنوان انترنت الاشياء وضيف الحلقة المهندس فهد الدريبي المحاضر بجامعة المجمعه وخبير امن المعلومات وانترنت الاشياء
@Fahad_Alduraibi
@HemayaGroup

الحلقة من تقديم 
عبدالله القحطاني
@qh_cs

HemayaPodCast109- انترنت الاشياء

#3 John Pacific of NuCypher | Applied Cryptography, Adversarial Thinking & Arbitrary Computation on Encrypted Data

#3 John Pacific of NuCypher | Applied Cryptography, Adversarial Thinking & Arbitrary Computation

Interview location: Palo Alto
Interview date: Thursday 31st Jan, 2018
Company: Cryptomathic
Role: Cryptographer and Security Expert

A number of pioneers developed the cryptographic and technical foundations for which Bitcoin is built upon. Nick Szabo highlighted a number of these people in his Tweet:

“Inventors of the most important technologies in Bitcoin: digital signatures and Merkle trees (Merkle), elliptic curve crypto (Koblitz), malicious-fault-tolerant consensus (Lamport), elliptic curve crypto (independent inventor: Miller).”

Many others along the way have contributed to the success of Bitcoin, either through early work or attempts at created a digital currency, names such as Adam Back, David Chaum and Szabo himself.

Whitfield Diffie sits alongside all of these people. His work on cryptography should not be forgotten in the history of Bitcoin and I had the pleasure of sitting down with him to discuss this, how he was introduced to Bitcoin and other such topics as privacy and security.

The What Bitcoin Did Podcast

Whitfield Diffie on the History of Cryptography

The pending cryptographic Quantum Apocalypse requires that we replace the hashing and encryption algorithms used through the internet, enterprise networks, mobile service, and popular devices. Join our experts to learn more about the requirements for quantum-resistant algorithms to survive the Quantum Apocalypse.

Root Causes 06: Quantum-Resistant Cryptography

Welcome to the first episode of the AskDeveloper Podcast, in this episode Tamer Zaki & Mohamed Elsherif are discussing the Software Quality issues especially in the Egyptian technology market, and how to change the culture for companies and development teams to adopt the right methodologies and processes.

Our theme music is provided by www.podcastthemes.com

EP01 - AskDeveloper PodCast - Software Quality

Welcome to the second episode of the AskDeveloper podcast, in this episode we are excited to announce a new host (Ahmed ElMalt) who joined us this week to give us his perspective and experience with software quality.

This week, the hosts are discussing in more details the subjects of Test Automation & Coding Standards.

Some links and tools mentioned in the episode.

Selenium a tool to automate web UI testing
Jenkins a cross platform Continuous Integration tool that can be used to automate the whole process from the Build to running tests to running analysis tools and have a good plugin ecosystem.
Clean Code One of the best books in market discussing the modern coding standards, and how to refactor and adopt the right practices for keeping the good state of code.

EP02 - AskDeveloper Podcast - Software Quality (Contd)

Welcome to the third episode of the AskDeveloper Podcast, in this episode we switch gear to answer the hard question of "How to build a good team?" and we start by the first stage in building your team which is recruitment, we discuss different aspects and stages of the recruitment  like

Who is a good candidate?
Where to publish job posts and find candidates
Recruitment Process
Industry Hires
Collage Hires
Interviewing for Interviewees
Interviewing for interviewers
Book recommendation

EP03 - AskDeveloper - Team Building - Recruitment

Welcome to the 4th Episodes of AskDeveloper Podcast, in this episdoes we start our journey talking about design and we start by discussing
* Why to Design
* Architecture vs Design
* Design Principles (SOLID Principles)
* Design but not Over engineer


EP04 - Talking Design - Part 1 - SOLID Principles

Welcome to the 5th episode of the Ask Developer Podcast, in this episode we continue the discussion about Design, in this episode we cover the design process, and what are the most effective ways to approach design in your team.
أهلاً بكم في الحلقة الخامسة من راديو اسأل مطور, في هذه الحلقة نكمل حديثنا عن التصميم, و نناقش اسلوب التصميم و كيفية تطبيقه في فريق العمل

EP05 - Talking Design - Part 2 - Design Process

Weekly Podcast discussing the Egyptian IT industry, and various other technology related topics 
راديو عربي على الانترنت من المبرمجين المصريين للمبرمجين, باللغة العربية و باللهجة المصرية