Mike West
where else to find them
what they talk about
where they keep going back
no series more than once — all 5 in the filters
on a stage with
- Dan Appelquistonce
- Henrik Rydbergonce
- J. Alex Haldermanonce
all 6 in the filters
who talks about the same things
- Lukas Weichselbaum3 talks
- Sebastian Roth6 talks
- Ben Stock16 talks
- Martin Johns14 talks
- Frederik Braun3 talks
- Dheeraj Joshi3 talks
| title | conference | date |
|---|---|---|
| Web Platform Security | dotSecurity 2016 | 2016-04-22 |
Browsers still let injected scripts and forged requests act with a site’s credentials so fixes focus on privilege reduction. Google’s bug program pays mostly… | ||
| Security | Edge Conference 2015 | 2015-06-27 |
A live demo shows a TweetDeck XSS caused by emoji parsing that used innerHTML to reintroduce unescaped script and a WordPress comment proves javascript: links… | ||
| Web Platform: The Secure Parts | GOTO Aarhus 2013 | 2013-09-30 |
Claim: serve everything over HTTPS, enable HSTS so browsers always use TLS, set cookies with Secure and HttpOnly, and pin keys where practical; StartSSL… | ||
| Towards a post-XSS world. | JSConf EU 2013 | 2013-09-14 |
Claim: Content Security Policy (CSP) can dramatically reduce XSS by whitelisting script/style sources and reporting violations. Implementation uses the HTTP… | ||
| XSS. (No, the _other_ "S") | CSSConf EU 2013 | 2013-09-13 |
Claims that CSS alone can exfiltrate CSRF tokens via background-image loads, using attribute selectors and pseudo-elements with content:attr() to pull fields… | ||
| nothing matches | ||