Evan Johnson
where else to find them
no profile links on file
what they talk about
all 8 in the filters
where they keep going back
all 5 in the filters
on a stage with
all 21 in the filters
who talks about the same things
- Conrad Watt12 talks
- Sean Isom7 talks
- Tyler McMullen14 talks
- Jay Phelps10 talks
- Deian Stefan14 talks
- Kenneth Rohde Christiansen13 talks
| title | conference | date |
|---|---|---|
| Radical Results: A Security Org's Version of Radical Candor | BSidesSF 2025 | 2025-04-26 |
Repurposes Radical Candor into a team-level quadrant with axes vibes vs effectiveness and a plotted-dot tool (ejcx.dev/radicalresults) to score projects… | ||
| Startup Security, 2nd Edition | BSidesSF 2024 | 2024-05-04 |
Actionable checklist for the first security hire: spend the first 30 days building relationships, 60 days planning and iterating, 90 days shipping a tangible… | ||
| FaJITa: Verifying Optimizations on Just-In-Time Programs | PriSC 2023 | 2023-01-21 |
FaJITa is a translation validator that checks semantic equivalence of JavaScript functions after Firefox JIT optimizations by combining symbolic execution with… | ||
| MSWasm: Soundly Enforcing Memory-Safe Execution of Unsafe Code | POPL 2023 | 2023-01-15 |
Extends Wasm with segmented memory and unforgeable handles that carry colored provenance, a formal semantics, and a proof that well-typed MSWasm modules are… | ||
| Implementing Zero Trust | Authenticate 2022 | 2022-10-17 |
Company moves from single-VPN choke point to a Zero Trust stack, handling ~36 million HTTP requests/sec and ~124 billion blocked attacks/day, by productizing… | ||
| Isolation without Taxation: Near-Zero-Cost Transitions for WebAssembly and SFI | POPL 2022 | 2022-01-16 |
Paper claims that adding static invariants lets sandboxed code use simple function calls instead of heavyweight wrappers, and implements this end-to-end. A… | ||
| Managing Secrets in Your Cloud Environment | BSidesSF 2018 | 2018-04-15 |
Central recommendation: stop putting credentials in code and centralize. Hands-on solutions compared: HashiCorp Vault (dynamic creds, but operationally heavy… | ||
| Misconfigured CORS and why web appsec is not getting easier | AppSecUSA 2016 | 2016-10-11 |
Claims a concrete fault: scanned the Alexa 1 million and finds about 1,000 sites reflecting the Origin header plus Access‑Control‑Allow‑Credentials true… | ||
| nothing matches | ||