~/talk

Defensive Coding Bootcamp

Talkat NDC Oslo 2022 · 2022-09-26..09-30· [security, testing]
slides:none on file

Covers common security vulnerabilities and practical coding techniques to reduce exploitability, using code examples applicable across programming languages. Focuses on defensive coding fundamentals and evasive maneuvers developers can apply to make their software more secure.

AI-written summary · about

  1. 0:00Defensive Coding Bootcamp
  2. 4:50Plan to rotate your keys
  3. 7:47Be skeptical about the new library on the block
  4. 11:06Challenge the status quo
  5. 12:31Your stack can obfuscate reality
  6. 14:35ORM
  7. 16:08Know what tests cover security
  8. 16:57Secure app!= secure data
  9. 20:18There is more than one way to approach auth
  10. 21:25Incorrect encoding & serializations are an issue
  11. 28:44Validate everything, every time
  12. 32:16Don't assume the user will follow your use case
  13. 33:48the same threat issues
  14. 35:4680% of security is a common body of knowledge.
  15. 36:50Get your head out of the code
  16. 37:48Have a trusted person take a look
  17. 39:03Verify that your environment has bare minimum security
  18. 39:46Be transparent immediately
  19. 42:12What do YOU wish you had known about coding defensively?
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.