Security BSides San Francisco Courses

Attacking and Defending Infrastructure with Terraform - How We Got Admin Across Cloud Environments

Explore how Terraform Cloud environments can be compromised through secret exfiltration and malicious infrastructure deployment, then mitigated.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

So You’re the First Security Hire - Creating a Security Program and Integrating Security into Your Company’s Culture

A practical guide for a first security hire to build a security program and integrate security into company culture.

• YouTube
• 19 minutes
• Self-Paced
• Conference Talk

What I Learned About Security Working Minimum Wage at Hollywood Video

A former video-store employee reflects on what constant theft taught him about practical security management.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

Windows 11 At Your Service

A look at a Windows 11 automation feature that sends user-built processes to Microsoft for execution across machines and cloud reporting.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Hacking the Hiring Process - Insider Tips for Your InfoSec Job Search

A security recruiter shares practical insider advice for making an InfoSec job search more effective.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

Scalable Security - How to Win Friends and Not Burn Out Everyone

Lessons from scaling security processes while keeping coworkers on board and avoiding burnout.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Container Vuln Management with - Hopefully Minimal Burnout

Uses a graph to trace container vulnerabilities to base images or services and pinpoint fixes across more than 1,000 microservices.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

Scraping After HiQ Labs v. LinkedIn

Explore how recent legal developments, including HiQ Labs v. LinkedIn, shape the legality of web scraping.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

Go Far Together - Building Your Squad

Practical ways to bring peers together so they can help one another succeed.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

Cameras, CACs & Clocks - A Story of Millions of Interrogated and Hacked xIoT Devices

A live hacking demonstration traces security research on millions of interrogated and compromised xIoT devices, alongside techniques for mitigating threats.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Designing Consumer Account Recovery in a 2FA World

Designing account recovery for users who lose or replace a device while 2FA is enabled, while limiting account takeover and support burden.

• YouTube
• 26 minutes
• Self-Paced
• Conference Talk

How to CTF Infra - Beyond the Challenges and Flags

A look at the infrastructure behind running a CTF, including participant registration, flag submissions, and keeping the scoreboard online.

• YouTube
• 21 minutes
• Self-Paced
• Conference Talk

Building Production-Grade End to End Encrypted Applications

A look at the product and operational challenges of building collaborative apps with end-to-end encryption.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

Hackers Don't Care About Scope

Narrow bug bounty and vulnerability disclosure scopes can keep researchers from finding meaningful vulnerabilities, while adversaries continue attacking the organization regardless.

• YouTube
• 22 minutes
• Self-Paced
• Conference Talk

The State of Blockchain Security - 2023 Edition

An annual review of blockchain security examines major DeFi, exchange, and blockchain compromises alongside emerging trends and opportunities.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk