Barry Dorrans
where else to find them
what they talk about
where they keep going back
- NDC Sydney2 editions2017–2018
on a stage with
never shared a talk
who talks about the same things
- Anders Abel14 talks
- Damian Edwards34 talks
- Brock Allen11 talks
- Martin Altenstedt3 talks
- David Fowler34 talks
- Dominick Baier31 talks
| title | conference | date |
|---|---|---|
| Security in ASP.NET Core 2.1 | Øredev 2018 | 2018-11-19 |
Covers concrete security changes in ASP.NET Core 1.0→2.1 and what's coming in 3.0: Kestrel ships HTTPS by default with dotnet dev-certs and SNI support, HSTS… | ||
| The Code Behind The Vulnerability | Øredev 2018 | 2018-11-19 |
Nine MSRC cases and one advisory get dissected with concrete reproductions and fixes: a hash collision DOS demo that inserts 1,000,000 keys and motivates… | ||
| Security in ASP.NET Core 2.1 | NDC Sydney 2018 | 2018-09-17 |
ASP.NET Core 2.1 turns on HTTPS by default and adds a dotnet dev-certs tool, Kestrel supports SNI and certificate selection/rotation, and HSTS is enabled with… | ||
| The Code Behind The Vulnerability | NDC Sydney 2018 | 2018-09-17 |
Covers real, fixed ASP.NET bugs with concrete root causes and fixes: a hash-collision DoS caused by predictable GetHashCode values (fixed by randomized… | ||
| Security in ASP.NET Core 2.0 | NDC Sydney 2017 | 2017-08-14 |
Kestrel now supports HTTPS and Visual Studio can issue self‑signed certs; running Kestrel on the edge is supported but not recommended. Authentication becomes… | ||
| The Code Behind The Vulnerability | NDC Sydney 2017 | 2017-08-14 |
Covers four real Microsoft security bulletins and live demos: a 2011 hash collision DoS fixed by per-process randomized string hashing; a padding oracle… | ||
| Security in ASP.NET Core 2.0 | NDC Oslo 2017 | 2017-06-14 |
ASP.NET Core 2.0 tightens hosting and identity: Kestrel selects HTTPS certificates by subject and expiry and is supported on the edge though an upstream proxy… | ||
| nothing matches | ||