OAuth, WebAuthn, and the Impact of Design Choices - Dan Moore - ASW #260 | Security Weekly Podcast Network (Video) Podcast

OAuth, WebAuthn, and the Impact of Design Choices - Dan Moore - ASW #260: We return to discussions of OAuth and all sorts of authentication. This time around we're looking at the design of authentication protocols, the kinds of trade-offs they weigh for adoption and security, and how a standard evolves over time to keep... by Application Security Weekly (Video)

39 min listen

OAuth, WebAuthn, & The Impact of Design Choices - Dan Moore - ASW #260: We return to discussions of OAuth and all sorts of authentication. This time around we're looking at the design of authentication protocols, the kinds of trade-offs they weigh for adoption and security, and how a standard evolves over time to keep... by Security Weekly Podcast Network (Audio)

78 min listen

The ABCs of RFCs - Heather Flanagan - ASW #266: We have a lot of questions about standards. How do standards emerge? How do standards encourage adoption? How do they stay relevant as development patterns change and security threats evolve? We have standards for web appsec (HTML, HTTP), all sorts of... by Security Weekly Podcast Network (Video)

39 min listen

The ABCs of RFCs - Heather Flanagan - ASW #266: We have a lot of questions about standards. How do standards emerge? How do standards encourage adoption? How do they stay relevant as development patterns change and security threats evolve? We have standards for web appsec (HTML, HTTP), all sorts of... by Application Security Weekly (Video)

39 min listen

The ABCs of RFCs - Heather Flanagan - ASW #266: We have a lot of questions about standards. How do standards emerge? How do standards encourage adoption? How do they stay relevant as development patterns change and security threats evolve? We have standards for web appsec (HTML, HTTP), all sorts of... by Security Weekly Podcast Network (Audio)

78 min listen

Episode 155: Testing PoW Consensus Algorithm Security with Ren Zhang from Nervos: In this week’s episode, we revisit the topic of Consensus Algorithms with Ren Zhang, a researchers at Nervos and previously at imec-COSIC (KU Leuven). We chat about an earlier work he did on evaluating PoW consensus protocols security and explore his more recent work on NC-Max - a consensus protocol that breaks the throughput limit and enables the full utilization of the nodes’ bandwidth in confirming transactions by Zero Knowledge

56 min listen

Episode 147: Oasis Labs & Privacy with Vishwanath Raman: In this episode, we catch up with Vishwanath Raman, Privacy Architect at Oasis Labs. Oasis is a privacy-enabled blockchain platform for responsible data use. Using a combination of secure computing and privacy technologies, the Oasis Network enables data owners to take control of their data and treat their data as a digital asset via data tokenization. They provide privacy as a service and use secure enclaves and differential privacy in order build a platform for a responsible data economy. by Zero Knowledge

54 min listen

Episode 144: Aleo with Howard Wu: In this episode, we invite Howard Wu back to the show to share more about his new project Aleo - a privacy-focused blockchain that enables fully private applications. We chat about why you need programming languages for SNARKs, what it is like to switch from VC/Academia to being a founder and the two important things missing in web services, high programmability and true user privacy. The project enables private applications with both data privacy and functional privacy - where the nature of the program running and all activity remains private. It is based on the ZEXE protocol and Proof-of-Succinct-Work. by Zero Knowledge

58 min listen

Data Integrity Lights the Way: Security With the Decentralized Web - Davi Ottenheimer - PSW #753: There's a lot of worry about "fakes" especially in a world rapidly adopting AI/ML, so it's time for solutions. "Solid" is the W3C open standard, extending HTTPS, to upgrade the Web with security paradigms that solve for data integrity. Distributed... by Security Weekly Podcast Network (Video)

71 min listen

OAuth 2.0 from Protecting APIs to Supporting Authorization & Authentication - Aaron Parecki - ASW #289: OAuth 2.0 is more than just a single spec and it's used to protect more than just APIs. We talk about challenges in maintaining a spec over a decade of changing technologies and new threat models. Not only can OAuth be challenging to secure by... by Security Weekly Podcast Network (Video)

37 min listen

OAuth 2.0 from Protecting APIs to Supporting Authorization & Authentication - Aaron Parecki - ASW #289: OAuth 2.0 is more than just a single spec and it's used to protect more than just APIs. We talk about challenges in maintaining a spec over a decade of changing technologies and new threat models. Not only can OAuth be challenging to secure by... by Application Security Weekly (Video)

37 min listen

Episode 209: Liquid Staking with Lido and Chorus One: This week Anna and Tarun chat with Vasiliy Shapovalov from Lido and Felix Lutsch of Chorus One about liquid staking on the ETH2 Proof of Stake consensus chain. Vasiliy explains Ethereum’s unique PoS validator setup and how liquid staking behaves on this network. They also talk about how liquid staking behaves on other live PoS, the inevitability of liquid staking and how to best design these systems. Lastly, they chat about navigating control and decision making in liquid staking protocols, touching on topics of decentralisation and governance. by Zero Knowledge

65 min listen

OAuth 2.0 from Protecting APIs to Supporting Authorization & Authentication - Aaron Parecki - ASW #289: OAuth 2.0 is more than just a single spec and it's used to protect more than just APIs. We talk about challenges in maintaining a spec over a decade of changing technologies and new threat models. Not only can OAuth be challenging to secure by... by Security Weekly Podcast Network (Audio)

61 min listen

New Wave Post Punk Security Hour - ASW #141: This week, we welcome Ted Harrington, Executive Partner at Independent Security Evaluators, to discuss Hackable; How to do Application Security Right! In the Application Security News, Implementation pitfalls in parsing JSON, finding all forms of a... by Security Weekly Podcast Network (Audio)

68 min listen

Episode 132: Handshake Protocol with Mark Tyneway: In this episode, we chat with Mark Tyneway who is a contributor on the Handshake Protocol project - an experimental peer-to-peer root naming system. We learn about this decentralised, foundation-free project, the issues of DNS, how Handshake plans on fixing this, how it differs from ENS, their unique airdrop process, what an Urkel Trie is, and more. by Zero Knowledge

55 min listen

Building Security Into the DevOps Lifecycle - Sumedh Thakar - PSW #666: DevOps has gained momentum over the years as its methods have been used by teams worldwide to accelerate application delivery. But where we continue to struggle is in integrating security into this workflow. In this discussion, Sumedh Thakar,... by Security Weekly Podcast Network (Video)

59 min listen

Security from a Developer's Perspective - Josh Goldberg - ASW #262: A lot of appsec conferences have presentations for appsec audiences -- but that's not often the group that's building apps. What if more developer conferences had appsec content? We talk with Josh about security from the developer's point of view,... by Security Weekly Podcast Network (Audio)

71 min listen

A Deep Dive Into Software Supply Chain Security - Neatsun Ziv - ASW #231: In this episode, Neatsun Ziv, co-founder and CEO of OX Security, takes a deep dive into software supply chain security. He focuses on the new Open Software Supply Chain Attack Reference (OSC&R), a first-of-its-kind framework for understanding... by Security Weekly Podcast Network (Video)

40 min listen

Object-Oriented UX (OOUX) with Sophia Prater: In this episode, Thomas Betts talks with Sophia P… by The InfoQ Podcast

44 min listen

Episode 83: From Warp Sync to SPREE with Polkadot's Rob Habermeier: In this episode, Anna chats with Robert Habermeier, one of the co-founders of Polkadot and an engineer at Parity, about his early experience with Rust and cryptography, as well as the work he did at Parity on Warp Sync and Lightclients, how this helped inspire some of the development of the Polkadot architecture and some of the exciting technical concepts that he has discovered along the way. by Zero Knowledge

68 min listen

Episode 151: John Adler on Optimistic vs ZK Rollup and the data availability problem: In this episode, we chat with John Adler - co-founder of Lazy Ledger and Fuel Labs. We compare Optimistic Rollups and ZK Rollups as well as discuss how Ethereum, specifically Eth1, could look over the next few years. We also talk about the data availability challenge in blockchains and how Lazy Ledger aims to solve this. by Zero Knowledge

71 min listen

Episode 154: ZK for authentication with Nolan and Locke from NuID: In this week’s episode, Anna spoke with Nolan Smith and Locke Brown, co-founders at NuID - a zero knowledge authentication solution. They explore the use-case of zero knowledge powered password management and how this relates to Identity. by Zero Knowledge

53 min listen

EigenLayer: The Endgame Coordination Layer | Sreeram Kannan and Soubhik Deb by 0xResearch

62 min listen

Securing your APIs using OAuth - Dan Moore - ASW #225: This segment will discuss options for protecting your APIs. First, why protect them? Second, what are the options and the tradeoffs. Segment Resources: - - - - - - - - Visit for all the latest episodes! Show Notes: by Security Weekly Podcast Network (Video)

42 min listen

Securing your APIs using OAuth - Dan Moore - ASW #225: This segment will discuss options for protecting your APIs. First, why protect them? Second, what are the options and the tradeoffs. Segment Resources: - - - - - - - - Visit for all the latest episodes! Show Notes: by Application Security Weekly (Video)

42 min listen

Kicking Off With Crypto - PSW #827: The Security Weekly crew discusses some of the latest articles and research in cryptography and some background relevant subtopics including the race against quantum computing, key management, creating your own crypto, selecting the right crypto and... by Security Weekly Podcast Network (Video)

65 min listen

ASW #231 - Neatsun Ziv: In this episode, Neatsun Ziv, co-founder and CEO of Ox security takes a deep dive into supply chain security. He focuses on the new Open Software Supply Chain Attack Reference (OSC&R), a consortium of leading cybersecurity leaders. OSC&R the... by Security Weekly Podcast Network (Audio)

80 min listen

Episode 152: Blockchain analytics with Alex Svanevik from Nansen: In this week’s episode, guest host Tarun Chitra and Anna chat with Alex Svanevik, CEO & cofounder of Nansen. They cover crypto analytics, DeFi analytics as well as discuss the push and pull between a need for privacy and the need for blockchain transparency and data. by Zero Knowledge

64 min listen

Shawn Wang - Temporal by devtools.fm: Developer Tools, Open Source, Software Development

56 min listen

Episode 170: Hardware for ZKPs & VDFs with Supranational: In this week’s episode, Anna and Tarun talk with Simon Peffers and Kelly Olson from Supranational, a startup focused on building specialised software and hardware for advanced cryptographic computation. Simon and Kelly talk about their recent work helping out the Ethereum Foundation with VDFs, as well as building a better SNARK algorithm for Protocol Labs’ Filecoin. by Zero Knowledge

61 min listen

Discover this podcast and so much more

OAuth, WebAuthn, and the Impact of Design Choices - Dan Moore - ASW #260

OAuth, WebAuthn, and the Impact of Design Choices - Dan Moore - ASW #260

Description

Titles in the series (100)

More Episodes from Security Weekly Podcast Network (Video)

Related podcast episodes