Hack to the Future
summary
Shows concrete, already-available defenses and real failures: a major bank literally loses data from a truck with ~18 million records, a breached site has 79% of accounts previously exposed, and Magecart uses a one-line script to exfiltrate card fields. Demonstrates deploying security.txt for responsible disclosure, and using a Content Security Policy with report-uri to have browsers send JSON reports (blocked-uri, document-uri) that reveal injected scripts and stop skimmers before they run.
AI-written summary · about
chapters (13)
- 0:00Introduction
- 2:37Cybersecurity reality vs perception
- 3:40Data breach examples and lessons
- 14:25Responsible vulnerability disclosure
- 17:16Magecart attacks steal payment data
- 21:50Defending with CSP against skimmers
- 27:30API security pitfalls in IoT
- 35:11Why API assumptions fail
- 39:49XSS vulnerabilities and defenses
- 47:08Browser XSS protections and reporting
- 49:40Decline of EV certificates
- 55:31Why EV certificates fail
- 58:20Closing thoughts
