A little while back I wrote about Hacking yourself first and detailed a bunch of different ways for developers to seek out risks in their own apps, hopefully before attackers find them first. I’m extremely enthusiastic about this approach and believe that developers need to hone cyber-offence skills in order to properly understand – and protect their apps from – risks on the web. There’s a heap more content coming from me along these lines in a variety of formats and today it’s a free video discussion on SSW TV.
These guys do a bunch of great videos on various development topics that are up on their website for free, even including my user group talk on Protecting your web apps from the tyranny of evil with OWASP recorded last year (effectively walking through the OWASP Top 10 for ASP.NET). Today’s video is a chat with SSW’s Damian Brady and we touch on a heap of different issues related to the web, ASP.NET and security in general. It’s a casual, unscripted discussion that hopefully contains some useful info for the security-conscious developer.