This post describes how a Compute Security team built kube-policies, a custom Kubernetes admission controller on top of Open Policy Agent (OPA) to replace Pod Security Policies with adaptive security guardrails.

Engineering

Squareup

51 min read

Security•2024-07-10

Making Insights-Driven Decisions in an Ecosystem of Ecosystems

Block shares their data-driven cloud security platform and a GCP static credential elimination case study.

Leveraging Linux Internals to Supercharge Osquery Malware Detection

This post describes a novel technique combining osquery, YARA, and the Linux /proc filesystem to detect fileless and in-memory malware on Linux systems.

Evolution of Developer Productivity at Square - Part Four

Square's fourth developer productivity post covers investments in reliability culture and test engineering infrastructure.

Evolution of Developer Productivity at Square - Part Three

Square's third article in their developer productivity series covers platform-specific tooling, hardware upgrades, and key learnings from scaling engineering practices.

Evolution of Developer Productivity at Square - Part Two

Square's Client Foundations team shares concrete improvements made to developer productivity across Android, iOS, and backend development workflows.

Engineering