Today, Off Script hosts Josh and James discuss all things web application security. It’s something that is getting more and more important to get right. More cyber attacks. More ransomware attacks. They address good application hygiene and the common pitfalls they are seeing people fall for. Big data breaches can lead to losing customer trust so it’s so important to makes sure you’re running a tight ship with security.
Basic security maintenance is essential but what can companies and individuals be doing to make sure their web applications are secure during a time of high value bug bounties being offered to people for finding vulnerabilities?
Bug bounties. The positives, negatives and relevancy to different sized agenciesThe use of bots to find MongoDB vulnerabilitiesEncrypted vaultsThe Slack issueHow hard is it to put secure processes in place from the start?Canary and environment variablesIf you’re a security researcher, what do you do with responsible disclosure?The fine line between helping the hackers and helping the communityWhat makes a good, secure app?Package managersModern libraries making it obvious when you are doing a bad thingOpen pull requestsGet your house in order with OWASPFrameworks and the early standards they set with password management and security hygieneImportance of rotating keysHuman interfaces and the floors surrounding themWhat can we learn from Twelve-Factor?Github Workspaces and recreatable environmentsThe issues of convenienceMacs vs dev accessibility and Windows catching upGithub and AtomGood, automated test suitesHow to have a good view on what makes a good security testFalling into the trap of feeling productiveSitting down with the team to discuss testing value and prioritiesThe creativity of SQL injectionReinventing the wheelDangers of writing an encryption tool and importance of getting an external security companyGitHub Security Bug BountysnykYarnThe Open Web Application Security Project12 FactorHyperFind out more about Stac and Parallax:
StacParallax