Security BSides San Francisco Courses

Scraping After HiQ Labs v. LinkedIn

Explore recent legal developments affecting web scraping's legality, focusing on the HiQ Labs v. LinkedIn case and its implications for data collection practices.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

Go Far Together - Building Your Squad

Discover practical strategies for assembling a supportive peer network to enhance collective success in the cybersecurity field.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

Cameras, CACs & Clocks - A Story of Millions of Interrogated and Hacked xIoT Devices

Demonstración en vivo de ciberataques a dispositivos IoT, con hallazgos de investigación de seguridad y técnicas de mitigación de amenazas para proteger contra actores maliciosos.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

Designing Consumer Account Recovery in a 2FA World

Explore strategies for secure account recovery with 2FA, balancing user convenience and protection against account takeovers while minimizing support overhead.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

How to CTF Infra - Beyond the Challenges and Flags

Explore the infrastructure behind Capture The Flag competitions, including user registration, flag submission, and scoreboard management for event organizers.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

Building Production-Grade End to End Encrypted Applications

Insights on building end-to-end encrypted applications, addressing challenges in security, compliance, abuse prevention, availability, and observability for privacy-focused collaborative products.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Hackers Don't Care About Scope

Explore the limitations of narrow bug bounty scopes and learn why expanding them can enhance security, as hackers and cybercriminals don't adhere to predefined boundaries.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

The State of Blockchain Security - 2023 Edition

In-depth analysis of major blockchain security incidents, trends, and opportunities in DeFi, exchanges, and blockchain ecosystems for 2023, offering insights into this evolving field.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

Placeholder for Dayzzz

Explore vulnerabilities in support systems and live chat services by exploiting placeholders to extract sensitive user data, as demonstrated by Rojan Rijal's research findings.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

Using Machine Learning to Detect Sensitive Documents on SharePoint

Explore machine learning techniques for identifying sensitive documents on SharePoint, addressing insider threats and data exfiltration risks while discussing unique challenges in security-focused ML model development.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

New Apps, Good Snacks - Effective Threat Modeling for New Territory

Explore effective threat modeling techniques for new features and devices, focusing on team education, security communication, and creating understandable models for diverse audiences.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

Sure, Let Business Users Build Their Own. What Could Go Wrong?

Explore the risks and challenges of empowering business users with Low-Code/No-Code platforms, examining potential security implications and enterprise-wide impacts.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

The Big "P" Problem in Cybersecurity

Explore the growing trend of cybersecurity professionals leaving the field, understand the underlying causes, and discover potential solutions to address this critical industry challenge.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

FAIR STRIDE - Building Business Relevant Threat Models

Explore FAIR STRIDE, a method for creating application threat models to determine ROI on security controls and prioritize risk reduction efforts for scalable product security.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Overwatch - A Serverless Approach to Orchestrating Your Security Automation

Discover Overwatch: a serverless security orchestration solution in Go, simplifying CI management and infrastructure maintenance for lean security teams shifting left.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk