Security14 Videos

TEQnation 2019: Erwin de Gier – Building a cloud native Crypto Currency platform with WebFlux

Full title: Building a cloud native Crypto Currency trading platform with Spring WebFlux Using events is a powerful alternative to REST-based communication in microservices. However, it comes with its own challenges: For instance, dealing with eventual consistency, synchronisation of state, and writing code which can handle asynchronous business logic. In this talk we explain how […]

TEQnation 2019: Brian Vermeer – Live exploiting your open source dependencies

Today, almost all software heavily relies on the use of third-party dependencies. While open source modules are undoubtedly awesome, they also represent an undeniable and massive risk. You’re introducing someone else’s code into your system, often with little or no scrutiny. Including the wrong package can introduce severe vulnerabilities, exposing your application and your user’s […]

TEQnation 2019: Seth Vargo – Base64 is not encryption – a better story for Kubernetes Secrets

Secrets are a key pillar of Kubernetes’ security model, used internally (e.g. service accounts) and by users (e.g. API keys), but did you know they are stored in plaintext? That’s right, by default all Kubernetes secrets are base64 encoded and stored as plaintext in etcd. Anyone with access to the etcd cluster has access to […]

TEQnation 2019: Julie Matviyuk – Friendly fire: how security software messes up

Have you ever wondered why, in the era of Deep Learning and hover-boards*, security software can still mess up? Why is it so challenging to distinguish clean files from malware? Here are 10 simple tips to make sure your software won’t be blasted off customers’ machines. *(they don’t really hover) For the past 10 years, […]

Future Tech 2019: Brenno de Winter – Resilience starts with code. Any attack starts with code

Bad code installed and smart exploits created. As soon as espionage or other APT’s are involved vague terms, lack of understanding and especially fear kick in. Common sense dictates other behavior. In this talk we focus on what we can do, what we should do and especially what you can do. Surviving digital xenophobia begins with replacing […]

J-Fall 2018: Simon Maple – Common vulnerabilities you wish your Java app didn’t have!

This session takes some of the most common vulnerabilities found in the Java eco-system, breaks them down and shows how simple code can exploit them. We’ll look at examples in the wild that have been exposed, some more famously than others, before showing you how to guard against these important security issues. Simon Maple Simon […]

J-Fall 2018: Maarten Mulders – SSL/TLS for Mortals

Using Transport Layer Security (TLS) the right way is often a big hurdle for developers. We prefer to have that one colleague perform “something with certificates”, because he/she knows how that works. But what if “that one colleague” is enjoying vacation and something goes wrong with the certificates? In this session we’ll take a close […]

J-Spring 2018: Siren Hofvander – Making cookies healthy. Security in a web based world

Our world has grown more complicated since cookies were first baked into web browsers as a way around state-based obstacles and sessions. In the intervening years they have held everything from unsecured administrative credentials to language preferences and even our window scroll location. But while the wild-west years of plaintext credential storage are hopefully over, […]

J-Spring 2018: Simon Maple – Common vulnerabilities you wish your Java app didn’t have!

This session takes some of the most common vulnerabilities found in the Java eco-system, breaks them down and shows how simple code can exploit them. We’ll look at examples in the wild that have been exposed, some more famously than others, before showing you how to guard against these important security issues. Bio Simon: Simon […]

FutureTech Preview

Future Tech is the new conference for and by Developers and IT professionals who work with Microsoft technologies (C#, .NET Framework and web technologies). Future Tech is the event in the Netherlands for everyone who has passions for tech! The main goal of Future Tech is to share all the available knowledge, ideas, know-how about […]