Sebastian Roth
where else to find them
no profile links on file
what they talk about
where they keep going back
- RuhrSec2 editions2020–2023
all 5 in the filters
on a stage with
all 4 in the filters
who talks about the same things
- Ben Stock16 talks
- Mike West7 talks
- Lukas Weichselbaum3 talks
- Dheeraj Joshi3 talks
- Michele Spagnuolo7 talks
- Halvor Sakshaug6 talks
| title | conference | date |
|---|---|---|
| TapTrap: Animation-Driven Tapjacking on Android | USENIX Security '25 | 2025-08-13 |
TapTrap is an animation-driven tapjacking that lets zero-permission apps supply custom entry animations to make a launched victim activity transparent or… | ||
| You Can't Always Get What You Want – How Web Sites... | RuhrSec 2023 | 2023-05-11 |
Measured across top 10,000 sites with five fresh requests per test using varying user agents, VPN/Tor and language settings, the team finds 321 sites with… | ||
| I Wanna Deploy You, but My Senses Tell Me to ... | RuhrSec Day 2022 | 2022-05-05 |
Analysis of ~10,000 sites over 12 weeks shows CSP adoption rises but is often ineffective: 95% meaningless (unsafe-inline, data: URIs or open https wildcards)… | ||
| Roadblocks for CSP and Where to Find Them | Global AppSec US 2021 Virtual | 2021-11-08 |
A qualitative study uses semi-structured interviews, drawing and coding tasks with 12 real-world developers to show many deployed CSPs are trivially… | ||
| Restricting the scripts, you're ... | RuhrSec 2020 #StayAtHome Edition | 2020-05-08 |
A seven‑year archive study of 10,000 sites extracts Content Security Policy headers from 2012–2018 and finds only about 11% adoption by end of 2018, with level… | ||
| Restricting The Scripts, You're To Blame, You Give CSP A Bad Name | OWASP Global AppSec Amsterdam 2019 | 2019-09-23 |
A longitudinal scan of 10,000 sites (2012–2018) shows CSP adoption rising but script restriction rarely effective: only about one third of policies touch… | ||
| nothing matches | ||