Tom Van Goethem
where else to find them
what they talk about
where they keep going back
no series more than once — all 7 in the filters
on a stage with
all 6 in the filters
who talks about the same things
- Pedro Fortuna9 talks
- Halvor Sakshaug6 talks
- Eoin Keary3 talks
- Bhushan B Gupta8 talks
- Aaron Bedra14 talks
- Akash Mahajan3 talks
| title | conference | date |
|---|---|---|
| Shiny Shells, Rusty Cores: A Crowdsourced Security Evaluation of Integrated Web... | SOUPS 2025 | 2025-08-10 |
A crowdsourced dynamic analysis using Check Engine plus an extended browser audit and a user‑agent fingerprint shows 76 enrollments across 53 products and 68… | ||
| Mobile- Or Attacker-Friendly? A Security Evaluation Of Mobile-First Websites | OWASP Global AppSec Amsterdam 2019 | 2019-09-23 |
Large-scale crawl uses headless Chromium on one million sites and finds mobile versions arrive much later — median 6.8 years after desktop — producing 10,222… | ||
| Who Left Open the Cookie Jar? A Comprehensive Evaluation of Third-Party Cookie Policies | USENIX ATC '19 | 2019-07-10 |
An automated test framework generates hundreds of web scenarios and applies them to 7 browsers and 46 extensions, producing a register of requests via a proxy… | ||
| Who Left Open the Cookie Jar? | USENIX Security '18 | 2018-08-15 |
A black-box framework uses Selenium, a controllable web server and a proxy to run comprehensive tests and a distributed crawler over the Alexa top 10k (160k… | ||
| Request and Conquer: Exposing Cross-Origin Resource Size | USENIX Security '16 | 2016-08-10 |
Describes two concrete size‑leak techniques that recover exact cross‑origin resource lengths in seconds: a channel‑based evil twin man‑in‑the‑middle that… | ||
| HEIST: HTTP Encrypted Information can be Stolen Through TCP-Windows | Black Hat USA 2016 | 2016-08-03 |
by Tom Van Goethem & Mathy Vanhoef
Over the last few years, a worryingly number of attacks against SSL/TLS and other secure channels have been discovered… | ||
| Issues And Limitations Of Third Party Security Seals | OWASP AppSec Research (AppSecEU) 2015 | 2015-05-19 |
Scanning of the seal ecosystem finds more than 8,000 sites using third‑party security seals, often e‑commerce, with prices from $84 to over $2,000 a year… | ||
| nothing matches | ||