Benjamin Hering
where else to find them
no profile links on file
what they talk about
where they keep going back
- BSidesSF4 editions2018–2024
on a stage with
never shared a talk
who talks about the same things
nobody close enough yet
| title | conference | date |
|---|---|---|
| Advanced Persistent Teenagers: Understanding the Lapsus$ Playbook | BSidesSF 2024 | 2024-05-04 |
Eight to ten teenagers using low‑cost tools and social engineering breach Microsoft, Okta, Uber and more without zero‑days, buying credentials for $10–$20… | ||
| How to Kill an AWS Access Key | BSidesSF 2020 | 2020-02-23 |
Shows how static AWS access keys get replaced by SAML + STS using AWS’s assume-role-with-saml API, Okta as the IdP, and a helper CLI (aws-okta or equivalents)… | ||
| HTTP Security Headers: A Technology History Through Scar Tissue | BSidesSF 2019 | 2019-03-03 |
History of browser-driven fixes that prevent real attacks and breakage: concrete headers and how to set them. Use X-Content-Type-Options: nosniff to stop MIME… | ||
| Blue Team Fundamentals | BSidesSF 2018 | 2018-04-15 |
Shows concrete defender wins and failures: blocks 34,000+ fuzzing requests from one IP (peaked ~93 req/s), fingerprints and blocks Apache Struts CVE-2017-5638… | ||
| nothing matches | ||