How do you build the foundations for a secure Google-scale enterprise that stays secure even if an AI is writing the code and nobody has time to review it? In this episode, hosts Timothy Peacock and Anton Chuvakin sit down with Christoph Kern, Principal Security Engineer at Google, to look under the hood of "secure-by-design." They trace Google's 15-year engineering journey to fundamentally eliminate entire classes of vulnerabilities rather than just playing whack-a-mole with bugs after they are written.

🛠️ Software Engineering vs. Software Craft: Why Google ditched "be careful" programming checklists in favor of hard compiler and framework-level invariants that make security defects physically impossible to build.

📦 Hiding the Risky Abstractions: How replacing high-risk programming constructs (like raw pointers in C++ or raw injection sinks in browser code) with safe, compiler-enforced abstractions secures codebases at a scale humans can no longer manually audit.

📢 "Marketing Didn't Write It": Christoph and the hosts unpack why the concept of "eliminating a class of vulnerabilities" is a rigorous, mathematical reality at Google rather than just public relations hype.

🤝 Empathy vs. Opinionated Platforms: The secret feedback loop Google uses to build highly opinionated developer platforms (like Boq or browser-native safe types) that protect systems without turning developers into frustrated "software artists" fighting the compiler.

📈 The Android Productivity Proof: The real-world metrics from Google's Android team proving that shifting to memory-safe languages (like Rust) dramatically drops vulnerabilities while actually boosting developer velocity and lowering rollback rates

EP289 Software Engineering vs. Software Craft: How Google Scalably Eliminates Classes of Vulnerabilities

Cloud Security Podcast by Google

EP289 Software Engineering vs. Software Craft: How Google Scalably Eliminates Classes of Vulnerabilities