José Carlos Chávez
where else to find them
website:https://jcchavezs.bsky.social
github:jcchavezs
bluesky:jcchavezs.bsky.social
speakerdeck:jcchavezs
devto:jcchavezs
what they talk about
all 6 in the filters
where they keep going back
- Open Source Summit Europe3 editions2023–2025
- NDC Security2 editions2024–2026
- Øredev2 editions2023–2025
all 7 in the filters
on a stage with
who talks about the same things
- Juan Pablo Tosso2 talks
- Jimmy Mesta7 talks
- Aaron Bedra14 talks
- Erlend Oftedal12 talks
- Rohit Ghumare7 talks
- Michael Lieberman36 talks
| title | conference | date |
|---|---|---|
| It is rough without a WAF | NDC Security 2026 | 2026-03-02 |
2025 shows rapid exploit weaponization and most disclosed CVEs are classic web issues like XSS and SQLi, so a WAF provides immediate, network-wide protection… | ||
| End of Life of Software: Can expired milk become a security breach? | Øredev 2025 | 2025-11-05 |
Software left past EOL turns into hidden operational debt and exploitable risk: 41% of installs still run Windows 10 months after its EOL date, asset… | ||
| End of Life of Software: Can Expired Milk Become a Security Breach? | Open Source Summit Europe 2025 | 2025-08-25 |
Automated inventory and mapping link services, language versions and owners into a central platform that pulls EOL data from end of life date, checks… | ||
| Fine-Grained Policies RBAC with OpenFGA | CloudOpen at Open Source Summit Europe 2024 | 2024-09-16 |
OpenFGA implements ReBAC (relationship‑based access control) as an open source authorization system (born at Okta, now CNCF incubation) and claims low‑latency… | ||
| Fine-Grained Policies RBAC with OpenFGA | Open Source Summit Europe 2024 | 2024-09-16 |
OpenFGA implements relationship‑based access control (ReBAC) with a readable DSL with testable models and language SDKs, storing policies centrally but… | ||
| Coraza Web Application Firewalls Revisited | Global AppSec Lisbon 2024 | 2024-06-24 |
Open source Coraza is a Go WAF that claims production readiness with OWASP endorsement and a recent v3.2.1 release and ~2K on GitHub. It runs as native Go or… | ||
| The Top 10 List of Istio Security Risks and Mitigation Strategies | NDC Security 2024 | 2024-01-09 |
CNCF’s community top‑10 frames Istio risk as configuration and operational failures rather than a flaw in the mesh: misconfigurations and permissive modes… | ||
| Web Application Firewalls Revisited | Øredev 2023 | 2023-11-08 |
Claims a modern WAF library called Coraza that implements OWASP CoreRuleSet and ships connectors for Envoy/Kong, Go middleware and Proxy‑WASM so rules run as… | ||
| Fine-Grained Policies RBAC with NGAC | IstioCon 2023 | 2023-09-25 |
NGAC (NIST) models access as a directed acyclic graph that overlays multiple policy classes (RBAC, location, topology) so a single decision can combine rules —… | ||
| Securing Modern Apps with Zero Trust and Next-Gen Web Application Firewall | CloudOpen @ Open Source Summit Europe 2023 | 2023-09-19 |
Zero trust reframes access decisions as per-request, context-driven policies enforced at each workload and a WAF becomes a Policy Enforcement Point protecting… | ||
| Securing Modern Apps with Zero Trust and Next-Gen Web Application Firewall | Open Source Summit Europe 2023 | 2023-09-19 |
Argues that Zero Trust doesn’t replace WAFs but relocates them to per-workload policy enforcement, and demonstrates a concrete toolchain: Coraza — an open… | ||
| nothing matches | ||