title	conference	date
Hidden Dangers Of AI In Developer Workflows: Navigating... with Dwayne McDaniel	DjangoCon US 2025	2025-09-08
Shows a real supply-chain incident where an NX library contained a supply chain prompt injection that exfiltrated keys, cites GitGuardian research finding… Talk on
What Is Going On In Your Source Code? Understanding SCA In Plain Language	SOSS Fusion 2024	2024-10-22
Breaks down software composition analysis into concrete checks: generate SBOMs + VEX attestation (CycloneDX / in-toto JSON), map known flaws via… Talk on
Businesses Run On Risk And Debt: Why Communicating Security Risk Is Hard	OWASP Global AppSec San Francisco 2024	2024-09-23
Claim: executives hear resiliency and technical debt very differently than security people do, so budget requests fail. Concrete moves: translate CVEs and CVSS… Talk on
Championing Security: Scaling Security at Every Level	CloudNativeSecurityCon North America 2024	2024-06-26
Security teams run about 100 to 1 short, so the practical fix is empowering embedded security champions on every team who spot problems, ask the right… Talk on
Long Live Short Lived Credentials - Auto-rotating Secrets At Scale	BSidesSF 2024	2024-05-04
Auto-rotate credentials by putting everything into a single secret manager, writing rotation scripts (AWS rotation Lambdas, Vault/Key Vault/Doppler… Talk on
Who Goes There? Detecting Intruders With Honeytokens	Conf42 DevSecOps 2023	2023-11-30
Claims that decoy credentials catch intruders early and cut dwell time, backed by finding 10 million hard-coded credentials on public GitHub last year… Talk on
Security Does Not Need to Be Fun: Ignoring OWASP to Have a Terrible Time	cdCon + GitOpsCon 2023	2023-05-08
OWASP documents 242 projects (about 155 usable) with 18 flagships, 36 labs and 114 incubators, and maps many tools to the SDLC so teams can act instead of… Talk on
Stop Committing Your Secrets - Git Hooks To The Rescue!	BSidesSF 2023	2023-04-22
Claim: stop secrets before they reach remote repos by running scanners in Git hooks. Evidence: a report finds 10 million secrets in GitHub public repos last… Talk on
App Security Does Not Need To Be Fun: Ignoring OWASP To Have A Terrible Time	Python Web Conf 2023	2023-03-13
OWASP packages practical assets: Top 10 vulnerability lists with “how to prevent” sections, one‑page cheat sheets, and hands‑on apps like Juice Shop… Talk on
Security Does Not Need to Be Fun: Ignoring OWASP to Have a Terrible Time	CloudNativeSecurityCon North America 2023	2023-02-01
Argues OWASP is a practical toolbox, not just a mission statement, listing roughly 157 usable projects, 18 flagship and 34 lab projects and the surprising… Talk on
Stop Committing Your Secrets - Git Hooks To The Rescue!	Conf42 DevSecOps 2022	2022-12-01
Repository scans find over 6 million exposed keys in 2021 and roughly three in a thousand commits contain a secret, so the proposed fix is automation: install… Talk on
Bash is magic # No it's not	MidCamp 2019	2019-03-21
Claim: anyone who can type can use the CLI to automate repetitive web tasks. Demonstrations show using Bash with WP-CLI, Drush, Composer, Git, curl, grep… Talk on
Nobody wants a website. They want results!	MidCamp 2018	2018-03-08
Argues that clients want measurable business outcomes, not a “website,” and recommends qualifying prospects by budget, authority, need and timeframe then… Talk on
We Are All Making This Up: Improv Lessons For Developers	MidCamp 2017	2017-03-30
Compares stage improv rules to web work and gives seven concrete practices: start with the obvious (treat the ticket as part of the scene and scope before… Talk on
nothing matches

-- 14 of 14 talks indexed --