Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Oh, I Found a Security Issue (Python.Pizza.Berl...

Avatar for Markus H Markus H
February 23, 2019
Technology
13k
0

Oh, I Found a Security Issue (Python.Pizza.Berlin 🐍🍕🐻)

A very short version of my "Oh, I Found a Security Issue" talk.

Avatar for Markus H

Markus H

February 23, 2019

More Decks by Markus H

See All by Markus H
🐍 ❤️ 🦀 — Python loves Rust
Avatar for Markus H markush
0
280
Knock! Knock! Who's There?
Avatar for Markus H markush
0
86
An Introduction To Kubernetes ☸
Avatar for Markus H markush
0
130
Writing Safe Database Migrations (DjangoCon Europe 2021)
Avatar for Markus H markush
0
14k
A Pony On The Move: How Migrations Work In Django 🐎
Avatar for Markus H markush
0
13k
All Hands on Deck — Handling Security Issues
Avatar for Markus H markush
0
14k
Logging Rethought 2: The Actions of Frank Taylor Jr. (PyCon UK 2019)
Avatar for Markus H markush
0
73
Logging Rethought 2: The Actions of Frank Taylor Jr. (PyCon Australia 2019)
Avatar for Markus H markush
1
230
Logging Rethought 2: The Actions of Frank Taylor Jr. (DjangoCon Europe 2019)
Avatar for Markus H markush
0
13k

Other Decks in Technology

See All in Technology
生成AIはソフトウェア開発の革命か、ソフトウェア工学の宿題再提出なのか -ソフトウェア品質特性の追加提案-
Avatar for kyonmm kyonmm
PRO
2
810
フロントエンドの相手が変わった - AIが加わったWebの新しいインターフェース設計
Avatar for azukiazusa azukiazusa1
31
9.7k
ブラウザの投機的読み込みと投機ルールAPIを理解し、Webサービスのパフォーマンスを最適化する
Avatar for did0es shuta13
3
270
雑談は、センサーだった
Avatar for 株式会社ビットキー / Bitkey Inc. bitkey
PRO
2
190
知ってた？JavaScriptの"正しさ"を検証するテストが5万以上もあること(Test262)
Avatar for Riya Amemiya riyaamemiya
1
130
自動テストだけで
リリース判断できるチームへ - 鍵はテストの量ではなくリリース判断基準の再設計にあった / Redesigning Release Criteria for Lightweight Releases
Avatar for えわ ewa
7
3.2k
独断と偏見で試してみる、 シングル or マルチエージェント どっちがいいの？
Avatar for ShichijoYuhi shichijoyuhi
1
240
サービスの信頼性を高めるため、形骸化した「プロダクションミーティング」を立て直すまでの取り組み
Avatar for すてにゃん stefafafan
1
220
AIはハッカーを減らすのか、増やすのか？──現役ホワイトハッカーから見るAI時代のリアル【MEGU-Meet】
Avatar for サイバーセキュリティクラウド cscengineer
PRO
0
270
コミュニティ・勉強会を作るのは目的じゃない
Avatar for uutan1108 ohmori_yusuke
0
280
Anthropic「Long-running a gents」をGeminiで再現してみた
Avatar for t-kikuchi tkikuchi
0
770
小説執筆のハーネスエンジニアリング
Avatar for osushi_cr yoshitetsu
0
910

Featured

See All Featured
How To Stay Up To Date on Web Technology
Avatar for Chris Coyier chriscoyier
790
250k
The Psychology of Web Performance [Beyond Tellerrand 2023]
Avatar for Tammy Everts tammyeverts
49
3.4k
Designing Powerful Visuals for Engaging Learning
Avatar for Mike Taylor tmiket
1
360
Designing Experiences People Love
Avatar for Jonathan Moore moore
143
24k
ピンチをチャンスに：未来をつくるプロダクトロードマップ #pmconf2020
Avatar for Aki / @LoveIdahoBurger aki_iinuma
128
55k
The AI Revolution Will Not Be Monopolized: How open-source beats economies of scale, even for LLMs
Avatar for Ines Montani inesmontani
PRO
3
3.4k
Bridging the Design Gap: How Collaborative Modelling removes blockers to flow between stakeholders and teams @FastFlow conf
Avatar for Kenny Baas-Schwegler baasie
0
530
jQuery: Nuts, Bolts and Bling
Avatar for Doug Neiner dougneiner
66
8.4k
The Web Performance Landscape in 2024 [PerfNow 2024]
Avatar for Tammy Everts tammyeverts
12
1.1k
Exploring the Power of Turbo Streams & Action Cable | RailsConf2023
Avatar for Kevin Liebholz kevinliebholz
37
6.4k
Between Models and Reality
Avatar for mayunak mayunak
3
280
Docker and Python
Avatar for Tania Allard trallard
47
3.8k

Transcript

  1. @m_holtermann Oh, I Found a Security Issue

  2. @m_holtermann Hi, I’m Markus Holtermann • Engineer at • Django

    Core Contributor markusholtermann.eu • github.com/MarkusH • @m_holtermann

  3. @m_holtermann Oh, I Found a Security Issue

  4. @m_holtermann Should I report a security issue? ▢ yes ▢

    no ▢ maybe

  5. @m_holtermann Where to report?

  6. @m_holtermann Where’s my fix?

  7. @m_holtermann Does it actually solve the issue?

  8. @m_holtermann Here you go!

  9. @m_holtermann TIL Today I Learned

  10. @m_holtermann Thank you! @m_holtermann