Security Journey's hi/5
Security Journey's hi/5
✓

Python Repos, Advanced SQL, NPM corruption, and more

00:02:32
Podcasts
RSS
Link
Lydfilen for denne episode er muligvis beskadiget How to fix it?

OM DENNE EPISODE

5% of 666 Python repos had comma typos (including Tensorflow, PyTorch, Sentry, and V8)​
Out of a group of GitHub repositories that had been checked, 5% had a comma problem. Either too few or too many commas somewhere in the library.

Advanced SQL Injection Cheatsheet​
This repository contains an advanced methodology of all types of SQL Injection.​ MySQL, PostgreSQL, Oracle, and MSSQL​

10 Threats ebook
Read about the eBook on 10 Greatest Threats to Your Application’s Security 2021 version.

Dev corrupts NPM libs ‘colors’ and ‘faker’ breaking thousands of apps ​
The colors library receives over 20 million weekly downloads on npm alone and has almost 19,000 projects relying on it. Whereas, faker receives over 2.8 million weekly downloads on npm, and has over 2,500 dependents.

How I Discovered Thousands of Open Databases on AWS​
My journey on finding and reporting databases with sensitive data about Fortune-500 companies, Hospitals, Crypto platforms, Startups during due diligence, and more.

Teknologi
Engelsk
USA
BrugAPItil at hente denne episode iJSON

SØG BLANDT TIDLIGERE EPISODER

Søg efter gamle afsnit af Security Journey's hi/5.
Integrer denne søgefelt på dit websted

ANDRE EPISODE I DENNE PODCAST

Hi/5: Minimum Viable Secure Product, Bandit, Sigstore and more

Hi/5: Minimum Viable Secure Product, Bandit, Sigstore and more

Minimum Viable Secure ProductMinimum Viable Secure Product is a minimalistic security checklist for B2B software and business process outsourcing suppliers. How to Secure Python Web App Using BanditBandit is a tool developed to locate and correct security problems in Python code. To do that Bandit …
00:02:41
DEL
GEM
Exact Dependencies, Insecure Design, How To Learn Stuff Quickly and more

Exact Dependencies, Insecure Design, How To Learn Stuff Quickly and more

How to Learn Stuff Quickly: https://www.joshwcomeau.com/blog/how-...Learning how to learn is a crucial skill of the security professional and developerNever Update Anything: https://blog.kronis.dev/articles/neve..."In my eyes, it could be pretty nice to have a framework version that's sup…
00:03:06
DEL
GEM
Trojan Source Attacks, AppSec Things to Watch, AWS WAF's Dangerous Defaults and more

Trojan Source Attacks, AppSec Things to Watch, AWS WAF's Dangerous Defaults and more

Protect your open source project from supply chain attacks - https://opensource.googleblog.com/2021/10/protect-your-open-source-project-from-supply-chain-attacks.html?m=1This blog post walks through the quiz questions, answers, and options for prevention, and can serve as a beginner's guide fo…
00:03:06
DEL
GEM
Container Security, Securing our Software Future, Threat Modeling Medical Devices and more

Container Security, Securing our Software Future, Threat Modeling Medical Devices and more

Exploring Container Security: A Storage Vulnerability Deep Dive - https://security.googleblog.com/2021/...Recently, the GKE Security team discovered a high severity vulnerability that allowed workloads to have access to parts of the host file system outside the boundaries of the mounted volume. Rem…
00:03:06
DEL
GEM
Holiday Hi/5: OWASP Top 10 Analysis, OWASP A08:2021, All Things SSRF, and more

Holiday Hi/5: OWASP Top 10 Analysis, OWASP A08:2021, All Things SSRF, and more

GitLab analysis of OWASP Top 10 changes from 2004 to 2021-https://public.flourish.studio/visual...Visualization of how OWASP Top Ten has changed over the years. To Learn a New Language, Read Its Standard Library-http://patshaughnessy.net/2021/10/23/...The best way to learn a new programming languag…
00:02:41
DEL
GEM
Ansvarsfraskrivelse: Podcasten og kunstværket, der er indlejret på denne side, er fra Security Journey, som tilhører dens ejer og ikke er tilknyttet eller godkendt af Listen Notes, Inc.
PROMOTED
We’re selling some of our podcast-related domain names, including breaker.fm, Podcast.mov, and Listen.Host. Place your bid on eBay.
We’re selling some of our podcast-related domain names, including breaker.fm, Podcast.mov, and Listen.Host. Place your bid on eBay.
Bid on eBay

ANBEFALINGER
Brug API til at hente denne episode