Security BSides San Francisco Courses

Catching the Phisherman

Uncover the largest credential harvesting campaign: its discovery, impact, and ongoing response. Gain insights into cybersecurity threats and investigative techniques.

• YouTube
• 27 minutes
• On-Demand
• Conference Talk

You Don't Have to Patch

Explore sandboxing and isolation as effective alternatives to rapid patching in cybersecurity. Learn strategies to enhance defense without solely relying on immediate updates.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

The History of Ransomware - From Floppies to Droppers, and Beyond

Explore ransomware's evolution from floppy disks to modern cyber threats, uncovering its strange history and valuable lessons for today's cybersecurity landscape.

• YouTube
• 24 minutes
• On-Demand
• Conference Talk

Protecting Pinner Passwords

Explore innovative techniques for enhancing password security and user experience on Pinterest, addressing common password-related challenges in social media platforms.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

Launch Control - Automating a Security Baseline in the Cloud at Scale

Learn to deploy cloud-native security controls at scale, using declarative configuration for an automated, self-healing security baseline across multiple cloud environments.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

Life of a Bug - An Insight on the GitHub Bounty Program

Explore GitHub's bug bounty program, from initial submission to resolution. Learn about the roles of Bug Bounty and PSIRT teams, and gain insights into the incident response process.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

NLP for Security Log Analysis - Learning to Crawl Before You Run

Explore the application of NLP in security analysis, focusing on embeddings for insider threat detection and the impact of large language models on the field.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

Disrupting Malicious Traffic with Egress Proxies

Learn to detect and disrupt malicious network traffic using egress proxies. Discover techniques to ensure trusted outbound connections and protect against external threats and data exfiltration.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

Hacking Policy and Policy Hacking - A Hacker Guide to the Universe of Cyber Policy

Explore the evolving landscape of cybersecurity policy, its impact on the industry, and opportunities for hackers to influence regulations. Learn about global trends, case studies, and tools for effective policy engagement.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

Stop Committing Your Secrets - Git Hooks To The Rescue

Learn to prevent accidental secret commits using Git hooks, enhancing code security and safeguarding sensitive information before it reaches remote repositories.

• YouTube
• 14 minutes
• On-Demand
• Conference Talk

Hiring and Interviewing as Security Engineers

Insights on reducing bias in security hiring and maximizing interviews for various roles, drawing from a decade of global experience across major tech companies and startups.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

Cross Site Scripting 101

Beginner-friendly introduction to Cross-Site Scripting (XSS) in web application security, including an overview and walkthrough of a basic XSS challenge from BSidesSF CTF.

• YouTube
• 18 minutes
• On-Demand
• Conference Talk

Gamify Security Best Practices to Scalably Improve Engineering Culture

Discover how gamification of security best practices can enhance engineering culture and improve security observability, based on Chime's successful implementation strategy.

• YouTube
• 17 minutes
• On-Demand
• Conference Talk

Using an mTLS Identity Provider to Achieve Password-less Auth, Device Health Attestation, and Low Earth Orbit

Explore Pinterest's innovative approach to secure authentication using mTLS, device health attestation, and a custom identity provider for password-less access and enhanced security.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

Community Cyber Defense - How to be a Local Cyber Hero

Discover how to protect local organizations from cyber threats through volunteer efforts and become a community cyber hero.

• YouTube
• 12 minutes
• On-Demand
• Conference Talk