Hack to the Future
summary
Demonstrates concrete failures and practical fixes: tapes and hard drives are lost on a truck, a breach of 186,000 records exposes plaintext and MD5 passwords, and an API that uses the VIN as a key lets remote climate control be triggered. Recommends easy defenses like publishing a security.txt, deploying a Content Security Policy with report endpoints to catch Magecart JavaScript and XSS attempts, and shows how browser auditors and CSP reports turn users into global sensors.
AI-written summary · about
chapters (11)
- 0:00Start
- 18:41Ticketmaster Ticket Master
- 22:43Content Security Policy
- 31:09How Do We Get the Right Apps to the Right Cars
- 42:11Cross-Site Scripting
- 45:20Xss Auditor
- 46:06Changing a Response Header
- 51:05Extended Validation
- 51:58What Color Is the Address Bar in Chrome
- 53:09Paypal
- 59:03Biometric Lock
