~/talk

Sure, Let Business Users Build Their Own. What Could Go Wrong?

Talkat Black Hat USA 2023 · 2023-08-05..08-10· [security, developer-experience]
slides:none on file

Slides and demos reproduce a Power Platform HR onboarding app that stores SSNs in a shared Dataverse table and shows automation logs store PII, proving the app functions but leaks sensitive data. Microsoft cites 8 million low‑code developers and a Fortune 500 example surfaces tens of thousands of apps created fast. Live demos show an Outlook→Gmail exfiltration app, admin credentials baked into apps, and an injection that grants manager ownership — features that work but break identity, audit and compliance.

AI-written summary · about

  1. 0:00Introduction to low-code
  2. 1:22Business adoption and scale
  3. 7:29Risks in employee onboarding
  4. 16:04Data leakage and sync risks
  5. 23:11Identity and access management
  6. 30:19The absence of traditional SDLC
  7. 35:09Strategies for secure adoption
  8. 40:26Q&A and closing
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.