title	conference	date
Building Identity into LLM Workflows with Verifiable Credentials	NDC London 2026	2026-01-26
A security researcher social engineers Claude (June 2025) until the model drafts and wants to run a jailbreak implementation, then demonstrates an… Talk on
Building Rock-Solid Encrypted Applications	NDC Melbourne 2025	2025-04-29
A live chat app is built step‑by‑step and works in demos: plain text → server‑side symmetric → end-to-end encryption with per‑device public/private keys →… Talk on
Fine Grained Authorisation with Relationship Based Access Control	Build Stuff 2024	2024-11-13
Argues that relationship-based access control (ReBAC) gives precise, scalable permissions by evaluating paths between entities instead of roles; implements a… Talk on
Ten Key Steps for Enhanced Web App Security	NDC Porto 2024	2024-10-14
A ten‑step, developer‑centric checklist that backs each point with demos and numbers: a live SQL injection demo plus XSS that exfiltrates cookies via ngrok and… Talk on
Fine Grained Authorisation with Relationship-Based Access Control	CPH DevFest 2024	2024-08-26
Relationship-based access control is shown end-to-end: an EAV model stores entities, relationships and permissions; a local demo runs in Docker with Postman… Talk on
Build your own Secure Messenger	NDC Sydney 2024	2024-02-12
A working static-site chat that implements end-to-end encryption in the browser using OpenPGP.js and stores public keys in Supabase while persisting private… Talk on
Fine Grained Authorisation with Relationship-Based Access Control	NDC Porto 2023	2023-10-16
Relationship-based access control (ReBAC) models permissions as edges between entities so revocation happens automatically when a relationship is removed, not… Talk on
Legacy Codebases are a DevOps Issue	devopsdays Eindhoven 2023	2023-10-11
Legacy systems measurably slow development and inflate maintenance costs, so automation and incremental change win over big rewrites: using CI/CD pipelines… Talk on
Clean Code: Be The Hero	NDC Oslo 2023	2023-05-22
Statistics show 51% of dev time on bad code and developers spend 45% reading vs 16% coding, leaving about 10% (≈4 hours) for new features. Clean code… Talk on
JWT! What is it good for? Absolutely everything!	NDC Melbourne 2022	2022-06-20
Explains JWT structure (header.payload.signature) and shows how signatures use HMAC256 signature so receivers can verify integrity without calling the issuer… Talk on
Authorised is Not a Yes/No Question	Apidays Live Hong Kong 2020	2020-10-08
Authorization is not a binary yes/no; the talk contrasts ABAC and RBAC and demonstrates a practical RBAC flow using Auth0, a Gatsby front end and an Express… Talk on
To Identity and Beyond	PyCon India 2020	2020-10-02
Explains the auth code flow: two redirects during login, exchange auth code plus client secret for an id token, access token and optional refresh token; access… Talk on
Authorised is Not a Yes No Question	PyCon India 2020	2020-10-02
Compares attribute-based access control and role-based access control and recommends starting with RBAC for simplicity then layering ABAC for fine-grained… Talk on
Authorised is not a Yes/No question	apidays LIVE Jakarta 2020	2020-09-30
Claim: authorization is not binary — use role-based then attribute-based checks. Demonstrates a React app with React + Auth0 SDK talking to an Express API that… Talk on
Say Goodbye to Passwords and Hello to WebAuthn	JSConf Korea 2020 Home Edition	2020-09-20
Claims that WebAuthn replaces passwords with hardware-backed keys and that it eliminates phishing get demonstrated with concrete mechanics: the browser calls… Talk on
Privacy, Security, Convenience; when it comes to home automation, can we pick all three?	linux.conf.au 2020	2020-01-13
Shows a practical home-automation stack that keeps control local: VLAN segmentation with an isolated IoT VLAN, end-to-end encrypted payloads signed as JSON web… Talk on
Zero Knowledge: you can't leak what you don't know	Laracon AU 2019	2019-10-31
Describes a concrete zero‑knowledge SaaS design for banking: profile blobs store per-account key pairs (private keys passphrase‑protected on the server)… Talk on
Opening Doors with JSON Web Tokens	NDC Sydney 2019	2019-10-14
Shows a working prototype that grants remote, offline-capable access by writing JWTs to NFC and verifying them locally on a Raspberry Pi door lock. Uses OAuth… Talk on
Opening Doors with JSON Web Tokens	PyCon AU 2019	2019-08-02
Shows a practical replacement for internet‑connected locks: an identity provider issues an RSA‑signed JSON Web Token to an Android app, the app writes the… Talk on
Why you shouldn´t care about Security	International PHP Conference Spring 2019	2019-06-03
Shows how outsourcing authentication to an identity provider like Auth0 removes password storage and sync headaches, replacing them with OAuth/OpenID Connect… Talk on
Web Application Security: Winning When The Odds Are Against You	ScaleConf 2019	2019-03-20
Live demos run on PHP apps inside Vagrant VMs show concrete failures and fixes: a registration form allows created admin via SQL injection by inserting quote… Talk on
Forgetting Passwords like a Pro	Voxxed Days Zurich 2019	2019-03-19
Demo of passwordless via SMS codes using the all-0 dashboard and a single-page app shows ID and access tokens returned as JWTs, including the live codes 869… Talk on
Writing Viruses for Fun, not Profit	PHPConf.Asia 2018	2018-09-27
Live demo builds a working PHP file infector named boom.php that scans for .php files, writes an infected temp file, renames it, and prevents reinfection with… Talk on
Writing Viruses for Fun, not Profit	International PHP Conference Spring 2018	2018-06-04
Live demos show a PHP file called boom.php that uses glob("*/.php"), fopen and copy-rename to prepend an encrypted payload, decrypting with mcrypt + base64 at… Talk on
Going Viral for Fun, not Profit	Dutch PHP Conference 2017	2017-06-29
Claims that historical worms infected huge fractions of the net — Melissa 20% of machines, ILOVEYOU tens of millions, Mydoom causing ~$38B damage — motivate a… Talk on
Zero Knowledge; Meeting the Growing Demand for Security and Privacy	Dutch PHP Conference 2017	2017-06-29
Prototype SaaS splits storage and processing: a Laravel backend hosts separate profile and transaction servers, keys are generated in the browser with… Talk on
nothing matches

-- 26 of 26 talks indexed --