Ep. 5: SQL Injection

Log4J has been the talk of the town recently and everyone is focused on the technical details of the specific vulnerabilities found. In this episode, James talks about the overarching ideas around dealing with vulnerable components. Are you vulnerable? If so, what needs to be done? For more info go…

Chrome has announced a few changes that we need to watch out for in the near future. We previously talked about the default value for samesite that is coming up fast. I wrote about this here:  https://www.jardinesoftware.net/2019/10/28/samesite-by-default-in-2020/ Also, they are getting ready to st…

In this episode we talk about addressing the root cause of an issue versus the symptoms. How can the process of keeping application components updated be improved?     For more info go to https://www.developsec.com or follow us on twitter (@developsec).     DevelopSec provides application security …

In this episode we talk about the spell check feature of the browser and how it could present a risk to sensitive data.     Link to article referenced:  https://www.darkreading.com/application-security/spellchecking-google-chrome-microsoft-edge-browsers-leaks-passwords        For more info go to ht…