Clint Gibler
where else to find them
linkedin:clintgibler
what they talk about
all 6 in the filters
where they keep going back
- BSidesSF6 editions2018–2026
all 4 in the filters
on a stage with
- Astha Singhalonce
- Isaac Evansonce
- Ken Johnsononce
all 5 in the filters
who talks about the same things
- Stefania Chaplin3 talks
- Tanya Janca30 talks
- Zane Lackey12 talks
- James Wickett14 talks
- Aaron Bedra14 talks
- Michael Kaufmann5 talks
| title | conference | date |
|---|---|---|
| State of (Absolute) AppSec | BSidesSF 2026 | 2026-03-21 |
Panel argues application security must adapt to non-deterministic AI-infused apps where models change runtime behavior, not just scan outputs. Concrete changes… | ||
| Sharing Vulnerabilities | BSidesSF 2025 | 2025-04-26 |
Reflective keynote arguing that emotional intelligence tangibly improves careers and relationships, illustrated with concrete examples: a supply chain… | ||
| TL;DR: Applying AI to Security | BSidesSF 2024 | 2024-05-04 |
Survey of concrete experiments and tools: LLMs are used to triage AppSec findings with Semgrep-style rules, run agents that call Nmap Zap Nuclei and other… | ||
| Eradicating Vulnerability Classes by Shelving SAST and Embracing Secure Defaults and Invariants | OWASP Global AppSec Virtual 2020 | 2020-10-22 |
Argues that replacing mass bug hunting with enforced secure defaults and invariants removes whole classes of flaws, citing Microsoft’s ~41% reduction from… | ||
| How to 10X Your Company’s Security (Without a Series D) | BSidesSF 2020 | 2020-02-23 |
Summarizes a practical playbook pulled from 50+ talks and dozens of tools and shows concrete wins: continuous PR scanning with fast AST checks using sgrep AST… | ||
| DevSecOps State of the Union | BSidesSF 2019 | 2019-03-03 |
Summarizes ~40 recent DevSecOps talks and distills concrete wins: automated least‑privilege via repo‑kid that prunes AWS permissions until failure, an… | ||
| How Leading Companies Are Scaling Their Security | OWASP AppSec Europe 2018 | 2018-07-02 |
Companies describe concrete measures and results: automated scrapers of Slack and JIRA to surface security-relevant work, internal threat‑model webapps that… | ||
| The SecDevOpronomicon | BSidesSF 2018 | 2018-04-15 |
Security teams are often outnumbered 100 to 1, so the talk argues for two concrete levers: ship secure-by-default libraries (examples: ban raw md5 by exposing… | ||
| SecDevOps: Current Research and Best Practices | OWASP AppSec California 2018 | 2018-01-30 |
Covers concrete SecDevOps moves: build secure-by-default libraries (example wrapper that bans MD5), run fast git hooks and linters like eslint to block eval… | ||
| nothing matches | ||