Antoine Carossio
where else to find them
what they talk about
where they keep going back
no series more than once — all 3 in the filters
on a stage with
who talks about the same things
nobody close enough yet
| title | conference | date |
|---|---|---|
| Decoding GraphQL: How to Map Hidden... | BSidesSF 2025 | 2025-04-26 |
Scans of the top 1M domains find ~200k GraphQL endpoints with ~60k exposing introspection; automated testing using a custom reinforcement learning algorithm… | ||
| GraphQL Security Vulnerabilities in the Wild | GraphQLConf 2023 | 2023-09-19 |
A scan of 1,600 endpoints yields 46,000+ security issues (about 30 alerts per app, 10% critical) and ~5,000 exposed PII/tokens, all discoverable without auth… | ||
| Navigating GraphQL Vulnerabilities: SRE / DevSecOps | SREday 2023 London | 2023-09-14 |
Escape scans 1,500+ production GraphQL endpoints using a feedback-driven API exploration engine and 500+ compute hours, finding 46,000+ security issues with… | ||
| nothing matches | ||