31/03/2022Running a process as root in a container vs running a container as rootRunning a container as a root is dangerous. But why? Letβs first understand what is the difference between running a...
26/02/2022Intro to Smart Contract Security and reverse engineering of int overflowdApp security is a whole new world where we should re-learn and change our perspective on security concepts. In this...
28/01/2022A $10,000 security bug: Identify, exploit and effectively fix SSTIin 2016, Uber paid out $10,000 for a security bug that could result into RCE. In this live workshop, we...
19/01/2022Parser Differential: A security vulnerability that we are going to live withParser differential is a security design flaw impacting millions of environment. It is the design flaw behind serious security attack...
06/12/2021What you see is not what interpreter sees!1000! Wondering why? Watch December secure programming free workshop
03/12/2021Two Overlooked Unicode vulnerabilities - Secure Programming Live WorkshopThe answer is 1000! Wondering why? What you see is not what interpreter sees! Watc the video below. Event: 7...
17/11/2021Dangerous casting of Number type in JavaScript/TypeScriptIn our first Defensive Programming principle we learnt that if we are dealing with weakly typed languages, we must first...
04/11/2021Go 1.18 comes with two exciting security featuresIt is exciting for me to see two new (security) features that will be added to Go. This will shift...
20/10/2021Not normalising before validation bypasses security checksA security patch that was added to Apacheβs httpd to prevent path traversal vulnerability was still vulnerable. This vulnerability was...