50 Shades of AppSec
summary
Shows how cheap and automated attacks really are: a five year old bypasses Xbox parental controls, a Bishop browser extension and Havij automate discovery and SQL extraction, and dark‑market listings claim 200 million Yahoo accounts alongside LinkedIn and Myspace dumps. Demonstrates real breaches (Ashley Madison ~30 million, VTech leak with 6 million children), many injection and auth failures including SQL injection and terrible password reset flows, and practical exploits like webcam‑exposed RSA tokens and IoT bulbs leaking Wi‑Fi.
AI-written summary · about
chapters (13)
- 0:00The accessibility of hacking
- 3:50Motivations of hacktivism
- 7:38The dark market data trade
- 11:05Remote extortion tactics
- 13:40Criminals making mistakes
- 18:23Vulnerable software design
- 23:39Risks of bad code examples
- 25:28Insecure password policies
- 29:12Misleading security training
- 35:55Conditioning users to fail
- 39:54Social media security risks
- 45:10Impact of data breaches
- 51:49IoT security vulnerabilities
