Gal Weizman
where else to find them
no profile links on file
what they talk about
all 5 in the filters
where they keep going back
no series more than once — all 4 in the filters
on a stage with
never shared a talk
who talks about the same things
- Liran Tal44 talks
- Pedro Fortuna9 talks
- Alex Sexton12 talks
- Benedek Gagyi8 talks
- Martin Johns14 talks
- Aaron Bedra14 talks
| title | conference | date |
|---|---|---|
| DOM Jungle - Can We Trust The UI? | Global AppSec Lisbon 2024 | 2024-06-24 |
Claims a concrete defense: an open source project called lavadome encapsulates DOM subtrees to prevent JavaScript from reading secrets (demo: Metamask private… | ||
| Gal Weizman @ ReactNext 24` | ReactNext 2024 | 2024-06-24 |
Claims that browser wallets change the threat model: the client holds private keys so theft is irreversible not your keys not your coins. Traditional XSS… | ||
| What Can Traditional Web App Security Learn From Browser Wallet Extensions? | Global AppSec Lisbon 2024 | 2024-06-24 |
Claims that hardening the client prevents irreversible crypto theft by confining untrusted code via compartments and per-dependency static analysis. Implements… | ||
| JavaScript Realms: The Blank Spot In Web App Runtime Security | Global AppSec Dublin 2023 | 2023-02-15 |
Web apps have a blind spot: same-origin child realms can evade runtime monkey patches and even import clean prototypes to manipulate the main window, so… | ||
| Pwning WhatsApp The Dark Side Of Web based Messaging Apps | OWASP Global AppSec Virtual 2020 | 2020-10-22 |
Demonstrates concrete, working flaws: reply-text fabrication lets a sender craft a fake quoted message; rich-preview URL tampering creates an open redirect… | ||
| nothing matches | ||