Security Journey's hi/5
Security Journey's hi/5
✓

Python Repos, Advanced SQL, NPM corruption, and more

00:02:32
Podcasts
RSS
Link
The audio of this episode may be broken. How to fix it?

ABOUT THIS EPISODE

5% of 666 Python repos had comma typos (including Tensorflow, PyTorch, Sentry, and V8)​
Out of a group of GitHub repositories that had been checked, 5% had a comma problem. Either too few or too many commas somewhere in the library.

Advanced SQL Injection Cheatsheet​
This repository contains an advanced methodology of all types of SQL Injection.​ MySQL, PostgreSQL, Oracle, and MSSQL​

10 Threats ebook
Read about the eBook on 10 Greatest Threats to Your Application’s Security 2021 version.

Dev corrupts NPM libs ‘colors’ and ‘faker’ breaking thousands of apps ​
The colors library receives over 20 million weekly downloads on npm alone and has almost 19,000 projects relying on it. Whereas, faker receives over 2.8 million weekly downloads on npm, and has over 2,500 dependents.

How I Discovered Thousands of Open Databases on AWS​
My journey on finding and reporting databases with sensitive data about Fortune-500 companies, Hospitals, Crypto platforms, Startups during due diligence, and more.

Technology
English
United States
Use API to fetch this episode in JSON

SEARCH PAST EPISODES

Search past episodes of Security Journey's hi/5.
Embed this search bar to your website

OTHER EPISODES IN THIS PODCAST

Exact Dependencies, Insecure Design, How To Learn Stuff Quickly and more

Exact Dependencies, Insecure Design, How To Learn Stuff Quickly and more

How to Learn Stuff Quickly: https://www.joshwcomeau.com/blog/how-...Learning how to learn is a crucial skill of the security professional and developerNever Update Anything: https://blog.kronis.dev/articles/neve..."In my eyes, it could be pretty nice to have a framework version that's sup…
00:03:06
SHARE
SAVE
Holiday Hi/5: OWASP Top 10 Analysis, OWASP A08:2021, All Things SSRF, and more

Holiday Hi/5: OWASP Top 10 Analysis, OWASP A08:2021, All Things SSRF, and more

GitLab analysis of OWASP Top 10 changes from 2004 to 2021-https://public.flourish.studio/visual...Visualization of how OWASP Top Ten has changed over the years. To Learn a New Language, Read Its Standard Library-http://patshaughnessy.net/2021/10/23/...The best way to learn a new programming languag…
00:02:41
SHARE
SAVE
Trojan Source Attacks, AppSec Things to Watch, AWS WAF's Dangerous Defaults and more

Trojan Source Attacks, AppSec Things to Watch, AWS WAF's Dangerous Defaults and more

Protect your open source project from supply chain attacks - https://opensource.googleblog.com/2021/10/protect-your-open-source-project-from-supply-chain-attacks.html?m=1This blog post walks through the quiz questions, answers, and options for prevention, and can serve as a beginner's guide fo…
00:03:06
SHARE
SAVE
Container Security, Securing our Software Future, Threat Modeling Medical Devices and more

Container Security, Securing our Software Future, Threat Modeling Medical Devices and more

Exploring Container Security: A Storage Vulnerability Deep Dive - https://security.googleblog.com/2021/...Recently, the GKE Security team discovered a high severity vulnerability that allowed workloads to have access to parts of the host file system outside the boundaries of the mounted volume. Rem…
00:03:06
SHARE
SAVE
Hi/5: Minimum Viable Secure Product, Bandit, Sigstore and more

Hi/5: Minimum Viable Secure Product, Bandit, Sigstore and more

Minimum Viable Secure ProductMinimum Viable Secure Product is a minimalistic security checklist for B2B software and business process outsourcing suppliers. How to Secure Python Web App Using BanditBandit is a tool developed to locate and correct security problems in Python code. To do that Bandit …
00:02:41
SHARE
SAVE
Disclaimer: The podcast and artwork embedded on this page are from Security Journey, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
PROMOTED
We’re selling some of our podcast-related domain names, including breaker.fm, Podcast.mov, and Listen.Host. Place your bid on eBay.
We’re selling some of our podcast-related domain names, including breaker.fm, Podcast.mov, and Listen.Host. Place your bid on eBay.
Bid on eBay

RECOMMENDATIONS
Use API to fetch this episode