Tino Sokic
Don't Be A Naive Developer: How To Avoid Basic Cybersecurity Mistakes
#1about 2 minutes
Why developers make basic cybersecurity mistakes
The talk will cover common security errors made by developers, the importance of correct terminology, and the conflict between functionality and business risk.
#2about 6 minutes
Moving beyond the "it just works" developer mindset
Developers must shift from prioritizing simple functionality to understanding the underlying infrastructure and building secure, robust solutions from the start.
#3about 3 minutes
Differentiating between a developer and a programmer
A developer has a broader range of responsibilities including project management, whereas a programmer is focused on specific coding tasks.
#4about 4 minutes
Understanding the internet's inherent insecurity
Core internet protocols like DNS and BGP were not built for security, and human behavior is a far greater risk than the technology itself.
#5about 3 minutes
A social engineering attack using a personal email
A simple social engineering attack demonstrates how using personal email for business communication creates significant security vulnerabilities.
#6about 6 minutes
Five common cybersecurity mistakes developers make
Developers often exhibit risky behaviors like overconfidence, poor password management, account sharing, and improper use of third-party libraries.
#7about 4 minutes
The clash between business pressure and security reality
Business pressures often force developers to launch products with known bugs or security flaws simply to meet deadlines and get paid.
Related jobs
Jobs that call for the skills explored in this talk.
Matching moments
05:28 MIN
Common security failures beyond individual coding errors
Maturity assessment for technicians or how I learned to love OWASP SAMM
28:05 MIN
A developer's responsibility to build secure software
You can’t hack what you can’t see
01:58 MIN
Cybersecurity is a foundational necessity not a passing trend
Decoding Trends: Strategies for Success in the Evolving Digital Domain
00:49 MIN
Why developers must take ownership of application security
Real-World Security for Busy Developers
05:07 MIN
Addressing the security education gap for developers
Climate vs. Weather: How Do We Sustainably Make Software More Secure?
55:17 MIN
Avoiding common security mistakes and giving better feedback
The weekly developer show: Boosting Python with CUDA, CSS Updates & Navigating New Tech Stacks
02:55 MIN
Why security is often neglected in development
Security in modern Web Applications - OWASP to the rescue!
27:19 MIN
Key takeaways on IDE and developer tool security
You click, you lose: a practical look at VSCode's security
Featured Partners
Related Videos
27:36Unleashing the Power of Developers: Why Cybersecurity is the Missing Piece?!?
Tino Sokic
33:29Programming secure C#/.NET Applications: Dos & Don'ts
Sebastian Leuer
28:41101 Typical Security Pitfalls
Alexander Pirker
27:32Security Pitfalls for Software Engineers
Jasmin Azemović
58:19Typed Security: Preventing Vulnerabilities By Design
Michael Koppmann
23:34Secure Code Superstars: Empowering Developers and Surpassing Security Challenges Together
Stefania Chaplin
26:59Security in modern Web Applications - OWASP to the rescue!
Jakub Andrzejewski
21:53Simple Steps to Kill DevSec without Giving Up on Security
Isaac Evans
Related Articles
View all articles
From learning to earning
Jobs that call for the skills explored in this talk.
IT-Security Engineer Awarness Training and Security Roadmap
Paris Lodron-Universität Salzburg
Microsoft Office
Security Developer / Engineer SOC Rotterdam
Working Class Heroes
Remote
Linux
Ansible
Terraform
Elasticsearch
+1
Embedded Security Engineer - Schwachstellenanalyse | Car IT | Secure Coding
Prognum Automotive GmbH
Ulm, Germany
Remote
DevSecOps Engineer Jr-Mid | Remote | *Attention - developers with a passion for security*
Punk Security Ltd.
Remote
€30-40K
Junior
Docker
Node.js
Kubernetes
+1