#391 Formal Methods, Functional Programming, and Securing the Java Ecosystem
growing up with a Commodore 64 and gaming, inheriting a 486 DX2 with Windows 3.1, first "enterprise" migration from Windows 3.1 to 3.11, early experiments with Turbo Pascal and Basic, curiosity-driven programming and disassembling electronics, building computers from parts in the early PC era, high school informatics classes and the transition from hobby to career, bachelor's degree in software engineering, master's degree at Utrecht University focusing on Formal methods and compiler construction, mathematical proofs of program correctness, abstract syntax trees and program analysis, Haskell and pure functional programming, recursion vs loops and thinking in different paradigms, the influence of functional programming on Java development, first professional Java job at a temperature sensor monitoring company, building systems for vaccine transport temperature verification, enterprise service-based architecture, JavaServer Faces for frontend development, transitioning to consultancy at Blue4IT working for banks and government, community involvement and knowledge sharing, joining Snyk as a hybrid engineer and developer advocate, Snyk's origins as an NPM dependency scanner, supply chain security and NPM package vulnerabilities, expansion from Node.js to Java and other ecosystems, static code analysis and container analysis and AI flow analysis, security as part of the development lifecycle not an afterthought, vibe coding and AI assistant security checks, MCP server toxic flow risks, Java vs python for scripting and automation, JBang for Java scripting, modern Java simplicity vs legacy enterprise verbosity, Java developers thinking about production from the start, Java and C# as the main languages for large backends, JVM optimization over time, Leslie Lamport and formal verification of concurrent programs, outsourcing expertise vs doing everything
Brian Vermeer on twitter: @BrianVerm