On November 1 at Brown's Rockefeller Library's Hecker Center, Georgia Weidman will talk about Transparent Smartphone Spying, She will talk about flaws in smartphone platforms that allow apps to silently steal user data.
11/1/11 - 6:30 pm
Rockefeller Library, Hecker Center
Brown University
10 Prospect Street
Providence, RI
As if you weren't nervous enough about password security, here is Martin "purehate" Bos at CarolinaCon talking about how he and his team can crack thousands of passwords quickly. If your password is less than 8 characters, it can take him only a few seconds. Pretty amazing stuff.
http://blip.tv/carolinacon/why-your-password-policy-sucks-martin-purehat...
These are not just application security, but all IT security. Here is a YouTube user that seems to grab and categorize lots of conference videos from places like DefCon, Black Hat, Source, ShmooCon, NotaCon, etc. If you follow him on Twitter, he sends a few tweets a day as new videos get added or just a random older video. Great stuff and you can either learn a lot or simply take a lot of time watching great conference videos.
His YouTube Channel:
http://www.youtube.com/user/ChRiStIaAn008
Here is a presentation given by OWASP's Dinis Cruz at AppSec Brazil titled "Making Security Invisible By Becoming Developers' Best Friend".
http://diniscruz.blogspot.com/2011/10/my-presentation-at-owasp-appsec-br...
Here's a nice 5 minute video by Acunetix on basic cross site scripting. When you see him injecting a scream into the site, it might be a little loud, so be ready for that.
http://www.acunetix.com/blog/web-security-zone/articles/video-how-cross-...
Transparent Smartphone Spying
Our next meeting will be held on November 1, 6:30 pm, at the Rockefeller Library's Hecker Center on the campus of Brown University (map to 10 Prospect St). Our presenter will be Georgia Weidman.
Here is a great presentation by Jayson Street from this year's DefCon where he shows how he can infiltrate just about anywhere and use whatever it takes to get whatever he needs. Very entertaining and extremely interesting. Well worth the time.
In case you hadn't heard about it, the OWASP Boston Application Security Conference is this coming Saturday, October 8 at Microsoft NERD in Cambridge, MA.
It is free for anyone to attend. I attended last year and thought it was great to talk to people in the area about web application security. Registration is still open!
This seems to be extra handy to have around and probably not bad to refresh every so often. All about how to prevent Cross Site Scripting (XSS) from the Open Web Application Security Project (OWASP)
Here's a paper I found interesting with tips on improving your web application security. By Frank Kim and Ed Skoudis of SANS.
http://www.sans.org/reading_room/application_security/protecting_web_app...