OAuth Tokens As Your Identity API
Explore OAuth and OpenID Connect for secure, scalable identity management in distributed systems. Learn to leverage tokens for user permissions, tracing, and delegation across complex networks.
HTTP Headers for the Responsible Developer
Explore HTTP headers for building inclusive, secure, and performant websites. Learn about encryption, request upgrades, content security policies, and data optimization techniques.
Unlock the Secrets of Great, Lasting APIs
Discover key insights on designing and building effective web APIs, including handling team friction, making technical choices, sketching, reversibility, versioning, and security considerations.
Going Static in a Dynamic World with Hasura and Nuxt.js
Explore static site development with Hasura and Nuxt.js, covering API setup, GraphQL integration, deployment triggers, and the benefits of Nuxt's static module for secure, efficient web applications.
The Secrets of OAuth 2.0 Part 1/2
Explore OAuth 2.0's history, differences from OAuth 1, authentication vs. authorization, grant types, token management, and PKCE in this expert interview on secure API access.
Restful Web API Patterns & Practices Cookbook
Explore the evolution of RESTful Web APIs, from design to implementation, covering security, evolvable architecture, and practical patterns for connecting microservices and orchestrating distributed data.
The State of Application Security 2023 - Learnings from 4 Million Scanned Services - Unveiling the Power of Proactive Cybersecurity Investments
Unveiling key vulnerabilities from a global scan of 4 million web services, this talk explores prevalent cyber risks, offering insights on file leaks, DNS vulnerabilities, and cross-site scripting with real-world examples and demos.
Crypto Heist - The Aftermath of a Government Website Cryptojacking Attack
Uncover a massive cryptojacking attack on government websites, explore its investigation, and learn preventive measures against similar threats in this eye-opening cybersecurity presentation.
Do You Really Know JWT?
Explore lesser-known aspects of JSON Web Tokens, including implementations beyond JWS, and their practical applications in authentication and information transmission.
Three New Attacks Against JSON Web Tokens
Discover three novel attacks on JSON Web Tokens, exploring vulnerabilities in authentication and session management. Gain insights into cryptographic design flaws and complexity issues in JWT implementations.
Checking Passwords on Leaky Computers - A Side Channel Analysis of Chrome's Password Leak Detect Protocol
Explore side-channel vulnerabilities in Chrome's password leak detection, revealing potential risks to user privacy and security through microarchitectural attacks on cryptographic implementations.
A Research Framework and Initial Study of Browser Security for the Visually Impaired
Exploring methodological challenges and best practices for conducting security research with visually impaired users, focusing on browser warning experiences and potential improvements.
Unlocking the Web - Exploring WebAuthn & Beyond
Explore WebAuthn, passwordless authentication, and cloud computing challenges with insights on data privacy, Kubernetes, and the future of web security.
Stealing HTML5 Storage & Injecting JSON
Explore techniques for exploiting HTML5 storage vulnerabilities and manipulating JSON data, enhancing your web security knowledge and defensive strategies.
Next Generation Web Reconnaissance
Explore advanced web reconnaissance techniques for ethical hacking, including cutting-edge tools and strategies to gather critical information and identify vulnerabilities.
Let's Go CSRF'n Now!
Explore Cross-Site Request Forgery (CSRF) attacks, their mechanisms, and prevention strategies in web security. Learn practical techniques to identify and mitigate CSRF vulnerabilities.
HTML 5 Security
Explore HTML5 security vulnerabilities and best practices with Justin Klein Keane. Learn about emerging threats and defensive strategies for modern web applications.
OWASP Top 10 of 2013 - It's Still a Thing and We're Still Not Getting It
Explore OWASP Top 10 vulnerabilities from 2013, their ongoing relevance, and why organizations struggle to address them effectively in web application security.
Bypassing Internet Explorer's XSS Filter
Explore techniques to bypass Internet Explorer's XSS filter, enhancing your understanding of web security vulnerabilities and protective measures.
Exploiting Browsers Like A Boss
Learn advanced browser exploitation techniques and strategies for identifying vulnerabilities in web applications from cybersecurity expert Bryce Kunz.
Special Teams Inurlrobotstxt - What are YOU Hiding?
Explore hidden web content using robots.txt files and discover concealed information on websites with this insightful cybersecurity presentation.