Web applications have historically been plagued by vulnerabilities which allow attackers to compromise the session of a logged-in user: XSS, CSRF, clickjacking and related issues. Luckily, new security mechanisms available in web browsers in 2019 offer exciting features which allow developers to protect their applications. In this talk, we'll introduce these features and explain how to most effectively use them.
We'll start by reviewing major threats based on an analysis of thousands of vulnerability reports Google receives each year under our Vulnerability Reward Program. We will find common themes between bugs which appear unrelated and focus our attention on the most frequent high-risk problems.
We'll then turn our attention to protective mechanisms implemented in modern browsers, which address entire classes of security problems. This includes CSP3 and Trusted Types to prevent XSS, Fetch Metadata Request Headers to protect from CSRF, and CORP/COOP to mitigate the threat of Spectre. EVENT: OWASP Global AppSec Tel Aviv 2019 SPEAKER: Lukas Weichselbaum PUBLICATION PERMISSIONS: Original video was published with the Creative Commons Attribution license (reuse allowed). ATTRIBUTION CREDITS: Original video source: https://www.youtube.com/watch?v=LqXwa8Np2Ko https://www.youtube.com/watch?v=CjjcglAnx68

When designing an API, how do you restrict your users to your public interface and keep their filthy hands off your internal implementation details? Sadly, the richness of Python's runtime makes this remarkably difficult. This talk investigates a number of ways to keep the riff-raff out and discusses the limitations of these techniques and how they can improve API designs. EVENT: PyData London 2019 SPEAKER: James Powell PUBLICATION PERMISSIONS: PyData provided Coding Tech with the permission to republish PyData talks. CREDITS: PyData YouTube channel: https://www.youtube.com/channel/UCOjD18EJYcsBog4IozkF_7w https://www.youtube.com/watch?v=xxus5XY_l3w

Progressive Web Apps aren't just for mobile any more, they make it possible to deliver high quality, capable apps on Windows, Mac, Linux and Chrome OS. We'll dive into the key things you need to know about how to build them, some of the unique features they offer, best practices you should be following, and how some of our favorite desktop PWAs were built. EVENT: Google I/O ’19 SPEAKER: Paul Covell, Dominick Ng PUBLICATION PERMISSIONS: Original video was published with the Creative Commons Attribution license (reuse allowed). ATTRIBUTION CREDITS: Original video source: https://www.youtube.com/watch?v=2KhRmFHLuhE https://www.youtube.com/watch?v=ei7WD3jBiRU