Install Me Maybe
How a trusted extension ID can resolve to an attacker-controlled package in another marketplace.

My talks, workshops and code-review challenges. Each page lists its appearances, with slides and recordings where available.
How a trusted extension ID can resolve to an attacker-controlled package in another marketplace.
Malicious IDE plugins and the marketplace tricks used to distribute them.
Lessons from applying web security knowledge to real vulnerability research.
Find the vulnerabilities in code snippets, from introductory exercises to advanced challenges.
Latest recording for this talk
Latest recording for this talk
Latest recording for this talk
May I use Google Analytics to count visits and clicks on slides and recordings? It stays off unless you accept. Privacy details.
Your browser couldn't save this choice. Analytics is off on this page. Clear this site's saved data to remove any earlier choice.