Pedro Fortuna
where else to find them
no profile links on file
what they talk about
where they keep going back
- BSidesSF2 editions2018–2023
all 6 in the filters
on a stage with
who talks about the same things
- Jasvir Nagra3 talks
- Aaron Bedra14 talks
- James Kettle13 talks
- Feross Aboukhadijeh22 talks
- Gal Weizman5 talks
- Zbyszek Tenerowicz10 talks
| title | conference | date |
|---|---|---|
| Dawn Of The Dead: The Tale Of The Resurrected Domains | Global AppSec Lisbon 2024 | 2024-06-24 |
Claim: criminals re-register abandoned JavaScript domains and turn them into a supply‑chain vector that injects skimmers into checkout pages. Method… | ||
| You don’t have to patch! | BSidesSF 2023 | 2023-04-22 |
Patching often takes weeks: testing, vendor coordination and rollouts delay fixes and patches sometimes fail to remove the vulnerability. Concrete mitigations… | ||
| Bots have gone phishing, but all they get is the boot | Global AppSec US 2021 Virtual | 2021-11-08 |
Claim: phishing bots are cheap and scalable but can be made impractical by forcing them to run the real frontend and by raising extraction costs… | ||
| Achieving the Web Isolation Nirvana - How far along are we? | OWASP 20th Anniversary 2021 | 2021-09-24 |
Shows a runnable client-side sandbox that is embeddable and requires no browser modification, demonstrates a plain compromised third‑party script exfiltrating… | ||
| Protecting Crypto Exchanges From A New Wave Of MitB Attacks | BSides Lisbon 2018 | 2018-11-29 |
Crypto exchanges face real Man‑in‑the‑Browser campaigns (Zeus Panda Ramnit Trickbot) that inject a one‑line first‑stage script into every endpoint, grab… | ||
| Caught My WebApp Cheating on Me! | BSidesSF 2018 | 2018-04-15 |
Web applications are routinely altered in the browser: examples include the 2015 Dridex man‑in‑the‑browser theft of at least $50M and a supply‑chain jQuery… | ||
| Crafting the next-generation Man-in-the-Browser Trojan | AppSec USA 2017 | 2017-09-19 |
A proof-of-concept MITB is implemented as a Chrome extension (built from Zeus code) that uses the webRequest API to remove headers (CSP/HPKP/HSTS), injects… | ||
| nothing matches | ||