Absolute AppSec

Latest Episodes:

Episode 118: Parler, Twitter, and IDOR Jan 12, 2021

Show notes

Seth and Ken return with a discussion about application security in the news, including relevance to the Parler "backups". Also discussions about Twitter and latest political developments and how they affect the security industry.

Episode 117: Solarwinds, Timing Attacks, Threat Dragon Dec 22, 2020

Show notes

The dynamic duo is back for their last podcast of 2020!

Episode 116: Lewis Ardern and Pwnfunction - Client-Side JavaScript Security Nov 24, 2020

Show notes

Lewis Ardern (@LewisArdern) and Pwnfunction (@pwnfunction) join Seth and Ken to talk client-side JavaScript security and their recent Vue JS blog post. https://portswigger.net/research/evading-defences-using-vuejs-script-gadgets

Episode 115: Clint Gibler - Static Analysis with Semgrep Nov 17, 2020

Show notes

Clint Gibler (@clintgibler) joins Seth and Ken to talk about Static Analysis with Semgrep. Demonstrations of writing rules within Semgrep and how to use it.

Episode 114: Account Enumeration, Github Actions Nov 10, 2020

Show notes

Seth and Ken discuss account enumeration vulnerabilities and open source tools that take advantage of them. Discussion about the recent Github Actions vulnerability.

Episode 113: Jacob Salassi - Modeling Threats, Risk Assessment Oct 27, 2020

Show notes

Jacob Salassi (@JacobSalassi) joins us to discuss his developer-driven, standardized, threat modeling process. Also discussions on developer empathy, risk assessment, and other topics.

Episode 112: Mark Feferman - Static Analysis Tools Oct 20, 2020

Show notes

Mark Feferman (@mfeferman) joins Seth and Ken to throw down about automated static analysis tools. Discussion of applictaion security talent (or lack thereof) and 'shifting left'.

Episode 111: Bug Bounties, Detection as Code Oct 13, 2020

Show notes

Seth and Ken dig into strange requests when running bug bounty programs, recent revelations on Apple security research, and detection as code.

Episode 110: Reserved Words, Authentication, Developer Patterns Oct 06, 2020

Show notes

Back at it like a phrack addict to talk reserved words, authentication flaws in apps and Grindr, and recognizing insecure patterns during development.

Episode 109: Threat Modeling, Social Media, Imposter Syndrome Sep 22, 2020

Show notes

We are back with a Seth and Ken only episode to talk about the evolution of threat modeling, the documentary "The Social Dilemma", mental health, and imposter syndrome.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected