Limitations, Locality, and Originality - Sparking Creativity Through Constraints
Explore how embracing limitations and locality can spark creativity and originality, leading to impactful projects and social movements in rural settings.
A Beginner's Guide to Code Review
Learn essential code review techniques to identify vulnerabilities, practice with labs, and discover resources for finding code to review. Improve your skills in detecting and fixing security issues.
DevSecOps Insights and Exciting Horizons
Explore DevSecOps trends and future strategies with RSAC 2024 Program Committee members, discussing standout sessions and emerging cybersecurity approaches.
Fresh SLSA and GUAC - Understanding Open Source Package Risks and Transparency
Explore open source package risks, transparency, and tools like GUAC, SLSA, and SBOMs to enhance software supply chain security and make informed decisions on dependencies.
DHS Supporting Critical Infrastructure Through Open-Source Software Prevalence Effort
Explore DHS's innovative methodology for identifying and assessing OSS in IT/OT devices, enhancing critical infrastructure cybersecurity through comprehensive vulnerability scoring and risk management.
Navigating the Growing Diversity Challenges in Open Source Software
Explore multidimensional diversity challenges in open source software, including gender, culture, and language. Learn about tools for monitoring project diversity and fostering inclusive OSS communities.
Diversity in Open Source - An Asian Perspective
Exploring challenges and solutions for increasing Asian participation in open source communities, addressing cultural, social, and linguistic barriers to achieve meaningful diversity.
Looking in the Rear View Mirror After 25 Years in the Industry
Insightful reflection on 25 years in infosec, offering valuable lessons and perspectives from an experienced professional's journey through various technical roles and industry changes.
Fuzzing the TCP/IP Stack - Beyond the Trivial
Explore advanced TCP/IP stack fuzzing techniques, focusing on innovative approaches like state fuzzing with PicoTCP. Learn about uncovering vulnerabilities and enhancing network security beyond traditional methods.
Setting Up a Bug Bounty and Automation Box - Part 1
Learn to set up a bug bounty and automation environment, covering essential tools and configurations for effective ethical hacking and cybersecurity testing.
Mass Production Testing of Circuit Boards - Techniques and Equipment
Comprehensive guide to mass production board testing, covering testpoints, fixtures, instruments, software, and accessories for efficient and cost-effective quality assurance in electronics manufacturing.
AI, IP, and Your Code - What Developers Need to Know
Explore legal implications of AI-generated code, including ownership, open-source usage, and intellectual property rights. Gain insights into navigating the complex legal landscape for developers.
Acknowledging Women's Contributions in the Python Community Through Podcast
Exploring efforts to improve diversity in Python podcasts, highlighting women's contributions, and discussing strategies to enhance representation in the community.
Secure Boot Vulnerabilities and Private Key Leaks - Implications and Solutions
Explore recent security breaches, their implications, and learn how to protect yourself online using two-factor authentication and tools like YubiKey.
Physical Emissions - CHES 2024
Explore cutting-edge research on physical emissions in cryptographic hardware at CHES 2024, chaired by Patrick Schaumont. Gain insights into latest developments and implications for secure system design.
Ransomware in Action - MedusaLocker ReadText34
Explore MedusaLocker ransomware's behavior and tactics through dynamic analysis, gaining insights into its encryption process and file manipulation techniques.
The Future of DevSecOps - Trends and Predictions for 2024
Explore DevSecOps trends for 2024: emerging technologies, security practices, and industry predictions. Gain insights to stay ahead in software development and operations.
Why "Safety"? How We Use Measurement to Advance Governance of Technology
Explore Internet Safety Labs' approach to software safety, including measurement methodologies, app safety labels, and data collection techniques for advancing technology governance.
The Hunt for CVE-2023-0286 - Replicating OpenSSL's Latest Vulnerability
Replicate CVE-2023-0286 in OpenSSL, learn to write a libfuzzer harness, and explore vulnerability research techniques for enhanced security awareness and threat prevention.
Making of the A2FPGA - From Breadboard to Production
Explore the creation, features, and future of A2FPGA with its creators, from initial design to production, including demos and extension possibilities.
Securing Mobile App Secrets: Preventing Credential Leaks in Android Applications
Explore how mobile apps leak sensitive credentials, analyze real-life breaches, and learn actionable steps to prevent secrets from being exposed in source code and compiled applications.