Serialization & Object Graph Communication
summary
Covers Java object serialization’s original design goals—transparent persistence and distributed objects (e.g., Java RMI)—and how serialization served those needs in the 1990s. Explains how design flaws and security vulnerabilities in Java deserialization were discovered over time, describes the dangers of deserializing untrusted input, and discusses techniques to avoid deserialization security issues.
AI-written summary · about
chapters (16)
- 0:00Introduction
- 0:41Serialization - How does it work?
- 9:49Status Quo / Alternatives
- 15:23How it works
- 20:18Bulletproof Serialization
- 24:02No Limitations
- 26:17Superior Performance
- 27:52Easy to Use
- 28:58Benefits
- 30:27Dependency graph
- 31:22Installation
- 32:34Client
- 33:16Integrations in the Making
- 34:58Kafka Producer
- 36:42Kafka Consumer
- 37:57Links
related talks
42mSerialization and Object Graph Communication
41mJava Serialisation: A Modern Fairytale
53mWhy We Hate Java Serialization And What We're Doing About It
41mHigh-Secure Java Serialization
47mA Modern Fairy Tale: Java Serialization
49mMarshalling: Data-Oriented Serialization
35mDangerous Serialization
51mSerialization: A New Hope