วีดีโอ

(serena chen) if you've been particularly eagle-eyed, you might've noticed that within the past year or so, the lock icon disappeared from Chrome's address bar. this is the story of why and how that happened, and maybe it's secretly a story about HTTPS and the web ecosystem and the sisyphean task of securing the web as a whole...... it's just an icon, michael. how hard could it be to remove? se...

(cait m) Any outcome works better if the teams involved work together instead of against each other. But many teams I've worked in have had longstanding issues, misunderstandings or grudges, which caused stress and poorer work outcomes for all involved. We'll talk through some tips, resources and mindsets i've found useful when working on repairing team relationships, both as a newcomer and whe...

(Colin) If you're new to security code review or bug bounties, finding vulnerabilities in WordPress plugins could be a gentle entrypoint that allows you to learn by doing, while racking up CVEs and a bit of money along the way - not to mention you'll be improving the security of thousands (or even millions!) of sites that rely on these plugins. Come along to find out more about how you can get ...

(Aleksa) containers might be old news, but securing them sure as heck 'aint! it turns out we are still battling with age-old Unix problems with healthy helping of slightly-less-old Linux problems that have been maturing in oak casks with labels that just read "beware of the leopard". paths? procfs? persistently pesky pernicious problems? oh my! hold on to your hat and join me on a whirlwind tou...

(Adam Black ​) This talk is aimed at those new to security. Every year (financial year) organisations send out tax summaries. Undesirably some of these are vulnerable to Insecure Direct Object Reference. This talks provides an intro to this area of security and how to avoid it A software engineer with a passion for security Licensed as CC BY-SA NC Produced by Next Day Video Australia: nextdayvi...

(Giuliana) Have you ever wondered exactly how people pirate software? What are the tools and techniques they used? At Atlassian, every new penetration tester writes a crack for Jira during their first couple of weeks. Why? Because those same tools and techniques used to pirate software are critical skills needed to perform effective security tests & research. In this talk, I’m going to teach so...

(Laura Wratten, Angus Cornall ​) OAuth can feel like a big, scary monster full of techy jargon and tricky standards. But it doesn't have to be that way! Ever clicked "Connect with Apple" or allowed an app to access your calendar? That’s OAuth in action! Join us for a friendly and easy-to-understand exploration of OAuth, specially crafted for beginners. In this talk, we'll break down the most im...

(Uncle Allan Murray) Licensed as CC BY-SA NC Produced by Next Day Video Australia: nextdayvideo.com.au Fri Nov 8 10:00:00 2024 at Main Room

(Ash) Have you been feeling more stressed and exhausted lately? You are not alone. Experiencing burnout is a sign that something needs to change. This talk explores common burnout causes and symptoms, and discusses practical strategies for recovery. Ash is an engineer working in product security and incident response. They are passionate about creating an inclusive and supportive tech community...

(Liam) it is simply not possible to learn everything you need to know about cybersecurity in a 20 minute talk slot, but we're going to do it anyway Liam started his career in cyber so long ago that it was still called infosec. He worked for many years as a software engineer before discovering that breaking things could be more fun than building things and jumped the fence to offensive security....

() Licensed as CC BY-SA NC Produced by Next Day Video Australia: nextdayvideo.com.au Fri Nov 8 10:20:00 2024 at Main Room

(Sam Thorogood) grug dislikes complex software (and security model) which is like ball with million spikes, makes grug brain sore just by holding. instead grug thinks treat whole ball like sandpaper, all together low-level spiky. grug will permit small number of big spikes because easier to understand where actual risky bits are, like bear cave over there. Licensed as CC BY-SA NC Produced by Ne...

tom eastman In some ways, Twitter seems like it was designed from the ground up to be the perfect tool for harassment. Twitter’s own mechanisms that are supposed to protect users sometimes seem to be pretty inadequate to the task. So I decided to make a few of my own. Along the way, I got to grapple with some interesting challenges, including and especially how to build a tool safe enough for u...

Wed Oct 16 17:15:00 2019 at Plenary Room

"opening ritual" - (purplecon 2019)

"risk management without slowing down [keynote]" - mikala easte (purplecon 2019)

"deploying kubernetes safer(ish) [keynote]" - james (purplecon 2019)

face your fearful foes to dodge a dark and dreary phishy fate [keynote]

"security confessions of a small country [keynote]" - laura bell (purplecon 2019)

"against lies, h*cking lies [keynote]" - anton black (purplecon 2019)

"to identity and beyond! [keynote]" - ben dechrai (purplecon 2019)

"incident response drills: how to play games and get good [keynote]" - kirk (purplecon 2019)

"choose your own adventure: password reset [keynote]" - moss (purplecon 2019)

"iam confused: a deep dive into how permissions work [keynote]" - sera (purplecon 2019)

"*banging fists on table* state machines state machines [keynote]" - william (purplecon 2019)

"embracing empathy [keynote]" - shahn harris (purplecon 2019)

"how to human in groups [keynote]" - sauramaia (purplecon 2019)

like, comment and subscribe: effective communication of security advice - serena chen [keynote]

Do you know what your containers are made of? - Moss [keynote]