Changing and Unchanged Things in Vulnerability Research
Explore vulnerability research evolution, from buffer overflows to advanced fuzzing and exploit mitigations. Analyze case studies and future trends in offensive and defensive security strategies.
Advancements in JavaScript Engine Fuzzing - OffensiveCon 2023
Explore advancements in JavaScript engine fuzzing, covering techniques like splicing, code coverage, and hybrid engines to enhance bug discovery and security testing.
The Print Spooler Bug that Wasn't in the Print Spooler
Explore a unique Windows vulnerability discovery, from initial bug report to full exploit chain, with insights on Microsoft's patch process and security implications.
Securing Content Distribution with RSTUF, an Incubating OpenSSF Project
Explore RSTUF, an OpenSSF project for securing content distribution. Learn about its implementation, adoption by PyPI and RubyGens, and use in private repositories and Archivista for in-toto attestation storage.
Web Developer Security: Best Practices and Beyond
Explore latest web security developments, technologies, and best practices for developers, including insights from recent workshops and W3C initiatives.
Managing Vulnerabilities in Open-Source Dependencies
Learn strategies to secure open-source dependencies, evaluate software composition analysis tools, and shift from reactive to proactive security postures in product development.
WISCANet - Easy Radio Networks with GNU Radio and Friends
Explore WISCANet: Simplify SDR network implementation for large-scale experiments using GNURadio and other programming languages. Learn about flexible multi-channel phase coherence and open-source capabilities.
Changing a Single Byte Saves Me Seconds Every Day - Hacking Tetris for Game Boy
Discover how hacking a single byte in Tetris for Game Boy eliminates an 8-second copyright notice, saving time and enhancing gameplay. Learn about reverse-engineering and game modification.
Making a Pixel-y Circuit Design Language and Building Circuits
Explore Reso, a graphical logic circuit design language inspired by Piet and Conway's Game of Life. Learn to create and execute bitmap circuits using your favorite graphics editor.
How to Implement Keycloak Authentication in React
Implement Keycloak authentication in React applications for enhanced security and access management in web-based projects.
Securing Web Applications: Integrating OWASP with Burp Suite
Integrate OWASP tools with Burp Suite to identify vulnerabilities, conduct security assessments, and implement effective mitigation strategies for web applications.
Securing Digital Frontiers: Leveraging Keycloak for Comprehensive Application Security
Explore Red Hat's Keycloak for robust identity and access management in diverse deployment environments, ensuring application security and mitigating financial risks.
Secure Your App: DevSecOps Trusted Application Supply Chain
Explore DevSecOps principles and implement a trusted application supply chain to enhance app security and streamline development processes.
Opensource Code Linting for Chip Design and Verification
Explore open-source code linting techniques for chip design and verification, enhancing quality and efficiency in semiconductor development processes.
Security Keynote - Open Source Software and Cybersecurity
Explore cybersecurity insights and strategies with Dr. Allen Friedman's keynote address on critical security challenges and solutions in the digital landscape.
Nation-State Threats in the Open-Source Software Supply Chain
Explore nation-state threats in open-source software, focusing on North Korean Lazarus Group's npm campaigns. Learn evolving tactics and motivations to better defend against sophisticated cyber threats.
Collaborative and Private Data Processing with TEE-enforced Sticky Policy - Tech Talk
Explore TEE-enforced sticky policies for collaborative and private data processing in this insightful tech talk by Zhiqiang Lin.
Pandora: Symbolic Validation of SGX
Explore symbolic validation techniques for Intel SGX, enhancing security in confidential computing environments.
BlindAI: Secure Remote ML Inference with Intel SGX Enclaves
Explore secure remote ML inference using Intel SGX enclaves, balancing security, privacy, and performance. Learn about BlindAI's open-source solution for confidential computing.
Creating the Right Developer Community for Your Company
Explore strategies for building effective developer communities tailored to your company's growth stage. Learn to make informed decisions for community expansion and strengthening.
The Power of Cross Community Collaboration
Discover strategies for effective cross-community partnerships in open-source projects. Learn co-product development, marketing, leveraging expertise, measuring success, and avoiding pitfalls.