Stop Making These App Security Mistakes! | A Masterclass in App Security with Laurențiu Spilcă

Is security an afterthought in your Flutter projects? In a world where a single breach can cost millions and destroy user trust, every developer needs a solid foundation in security.

In this episode of Flying High with Flutter, Allen Wyma sits down with seasoned software developer, trainer, and acclaimed author Laurențiu Spilcă to demystify application security. While Laurențiu's background is deep in the Java/Spring world, the principles he shares are universal and essential for any developer building modern applications.

We dive deep into the "why" and "how" of securing your apps, from the initial authentication flow to the communication between your backend services.

Timecodes:

00:00 - Meet Laurențiu Spilcă & Why Security Can't Be an Afterthought

06:16 - The Role of a CISO and Preventing Disasters like the log4j Vulnerability

14:09 - The Future is Passwordless

30:41 - Understanding OAuth2, OpenID Connect, and Why PKCE is CRITICAL for Mobile Apps

41:45 - What is TLS? Why Your App Needs More Than Just HTTPS

52:03 - Mutual TLS (mTLS): Securing Communication Between Your Microservices

GET THE BOOK!

📘 The principles in this episode are covered in-depth in Laurențiu's book, "Software Security for Developers".

Grab your copy with 45% OFF with code flutter45:

🔗 https://www.manning.com/books/software-security-for-developers

CONNECT:

🎙️ Guest: Laurențiu Spilcă

X/Twitter: https://twitter.com/laurspilca

🎙️ Host: Allen Wyma

X/Twitter: https://x.com/allenwyma

🚀 Flying High with Flutter

Listen: https://podcasts.apple.com/hk/podcast/flying-high-with-flutter/id1562119447?i=1000523147383

Watch:

https://www.youtube.com/channel/UCmL2YRyMphHK87fnyFlotWA

Connect:

X/Twitter: https://twitter.com/fhwflutter

Facebook: https://www.facebook.com/FlyingHighWithFlutter/

Website: https://flyinghighwithflutter.com

.

.

.

#Flutter #SoftwareSecurity #AppDevelopment #MobileDev #Security #OAuth2 #Passkeys #DeveloperPodcast #mTLS #Cybersecurity #dev