DiscoverAbsolute AppSecEpisode 251 - Passive Scanning, Chrome Extensions, CocoaPods, NVD
Episode 251 - Passive Scanning, Chrome Extensions, CocoaPods, NVD

Episode 251 - Passive Scanning, Chrome Extensions, CocoaPods, NVD

Update: 2024-07-09
Share

Description

Seth and Ken are back with Episode 251, continuing on with their ranting over all things application security. This starts with a discussion of Mozilla's HTTP Observatory that scans sites for security-relevant headers and leads to a discussion of so-called "passive" scanning of internet sets for risk analysis purposes. This is followed by a walkthrough of the recent exploit of Chrome extensions for remote code execution on client browsers. Compromise of the Apple-focused CocoaPods package repository. Finally, a discussion about recent problems and headaches at the National Vulnerability Database (NVD).
Comments 
In Channel
00:00
00:00
x

0.5x

0.8x

1.0x

1.25x

1.5x

2.0x

3.0x

Sleep Timer

Off

End of Episode

5 Minutes

10 Minutes

15 Minutes

30 Minutes

45 Minutes

60 Minutes

120 Minutes

Episode 251 - Passive Scanning, Chrome Extensions, CocoaPods, NVD

Episode 251 - Passive Scanning, Chrome Extensions, CocoaPods, NVD