How to defend the web

on YouTube ↗48m

" summary

Case study: a major Indian bank breaks in Opera because an old Dynamic Drive script blocks Opera with one line and the fix is literally to remove one line that blocks Opera — the patch takes two weeks and a printed source file passed around a secure office. Claims and fixes: browser sniffing causes sites to serve wrong code (Opera 10 misdetected as “1”), use feature detection and Modernizr, keep libraries updated, file browser bugs, and note that 99% of Opera users with browserJS won't notice when remote patches apply.

AI-written summary · about

" chapters (34)

1. 0:00Defending the web
2. 1:36Web under threat
3. 3:03About the speaker and their background
4. 4:50Contact for site issues
5. 6:37India’s site compatibility issue
6. 10:55Outdated libraries and maintenance
7. 12:20Browser sniffing harms
8. 14:03User agent string manipulation
9. 16:33Websites blocking Opera
10. 17:58Handling browser issues
11. 18:40Feature detection over sniffing
12. 19:02Cost of JS libraries
13. 20:06Native apps vs web
14. 21:34Staying updated with web tech
15. 23:21Keeping up with browsers
16. 24:03Opera switches to WebKit
17. 25:48Testing rendering engines
18. 26:29Cross-browser testing
19. 26:51Web accessibility importance
20. 27:53Accessibility impact story
21. 30:44Defend web for all users
22. 31:24Speak up for the web
23. 32:05Q&A
24. 32:27Opera to WebKit and Dragonfly
25. 33:09Government and accessibility
26. 35:13Screen readers in Opera
27. 36:21Accessibility guidelines simplified
28. 37:46Enforcing accessibility standards
29. 39:11Balancing accessibility access
30. 42:01Education over force
31. 43:04Legislation and education
32. 44:48Empathy in development
33. 45:32Accessibility challenges demo
34. 46:21Closing remarks

" related talks

• 41mHow to Destroy the Web OperaBruce Lawson · Codemotion Roma 2014
• 55mWeb Application Security: Browsers Fight Back!Christian Wenz · NDC London 2017
• 43mWhy Opera Needs WebKit, or Opium for the PeopleVadym Makeev · FrontTalks 2013
• 42mThe Perilous Future of Browser SecurityRobert Hansen · AppSecUSA 2013
• 43mBypassing Malware Detection Mechanisms in Online BankingJakub Kaluzny, Mateusz Olejarka · Black Hat Asia 2015
• 19mEnsuring a Performant Web for the Next Billion PeopleBruce Lawson · Velocity Santa Clara 2015
• 39mRoadblocks for CSP and Where to Find ThemSebastian Roth · Global AppSec US 2021 Virtual
• 19mWeb Platform SecurityMike West · dotSecurity 2016