Hack to the Future

on YouTube ↗01h 00m

" summary

A live rundown of real incidents and fixes: a breach-aggregation service shows 8.5 billion records and verifies breaches like an 186k adultfanfiction dump and a 380k-card Magecart haul; third-party scripts exfiltrate form fields until a Content-Security-Policy with reporting blocks and logs attempts via a report-uri; IoT failures include a Nissan Leaf using VIN as an API key allowing remote heater control, and TickTock Track watches exposing family IDs and enabling stranger calls; adoption of security.txt and CSP is presented as simple, effective mitigation.

AI-written summary · about

" chapters (11)

1. 0:00Start
2. 16:36The Dublin Rail System
3. 23:00Embedding an External Javascript File
4. 28:19Add a Reporting Uri
5. 30:32Csp Adoption Rates
6. 30:51Ticketmaster
7. 32:12Nissan Leaf
8. 43:49Helicopter Parents
9. 47:54Authentication Token
10. 54:05Biometric Padlock
11. 56:32Attacker Has the Ability To Put a Tag on a Page Do They Not Also Have the Ability To Remove the Content Security Policy

" related talks

• 01h 00mHack to the FutureTroy Hunt · NDC Oslo 2019
• 01h 10mHack to the FutureTroy Hunt · NDC London 2019
• 01h 01mHack to the FutureTroy Hunt · NDC Security Oslo 2019
• 01h 01mSomething Something CyberTroy Hunt · NDC Oslo 2017
• 35mCYBERSECURITY! The good, the bad, and the hackedOlowoniwa Gabriel Ayokunle · Build Stuff 2020
• 33mHacking The Front-EndAlex Sexton · Full Stack Fest 2015
• 46mHow to hack a node app?Asim Hussain · The Rolling Scopes Conference 2018
• 57mLessons From Billions of Breached RecordsTroy Hunt · Security Visionaries 2022