iiinova — where your digital self keeps evolving

Philippe De Ryck @philippederyck.bsky.social · 09/04/2025

Join me for another OAuth & OIDC masterclass. We will cover use cases, complexities, latest best practices, and high-security configuration options for OAuth in 4 live 3-hour sessions. Early bird discount available for 10 more days buff.ly/wLedqA2 #appsec

031

Philippe De Ryck @philippederyck.bsky.social · 14/02/2025

SecAppDev is now on Bluesky. If you want to stay up to date, make sure you follow us!

030

Philippe De Ryck @philippederyck.bsky.social · 29/01/2025

This cheat sheet gives you an overview of current best practices for using OAuth 2.0. Grab a PDF copy here (buff.ly/4jCred1). If you want to learn more about these topics, this masterclass covers it all! buff.ly/3PnrZJ6 The early-bird rate has been extended for a few more days, so grab a ticket now!

070

Philippe De Ryck @philippederyck.bsky.social · 06/01/2025

I am kicking off 2025 with a new live interactive training on OAuth 2.0 and OIDC. This course covers the latest best practices for browser-based apps, API security, and high-security OAuth configurations. Early bird and group (3+) discounts available! Info & registration: buff.ly/3PnrZJ6

131

Philippe De Ryck @philippederyck.bsky.social · 10/12/2024

Last week, I taught two 2-day classes, which is always insanely intense and really requires an enormous amount of energy. Fortunately, the feedback makes it worth it! Now two weeks of doing some research and consulting. And of course, prepping the menu and trying out some dishes for the holidays!

030

Reposted by Philippe De Ryck

smaury @smaury.bsky.social · 05/12/2024

Awesome research! It's always crazy how many vulnerabilities you can still find by just reading RFCs 🔥

072

Philippe De Ryck @philippederyck.bsky.social · 26/11/2024

Hey @webappsec.dev , any idea if there’s a way to make import() (developer.mozilla.org/en-US/docs/W...) work with nonce propagation? It works with ‘strict-dynamic’, but having explicit nonce propagation would also be nice …

developer.mozilla.org

import() - JavaScript | MDN

The import() syntax, commonly called dynamic import, is a function-like expression that allows loading an ECMAScript module asynchronously and dynamically into a potentially non-module environment.

110

Reposted by Philippe De Ryck

Lukas Weichselbaum @webappsec.dev · 17/11/2024

I'm in the process of creating a *web security* starter pack and need your help finding more webbies here. Please share and recommend folks passionate about web security in comments below so we can get this community started here 🙂 go.bsky.app/Uf8dZhz

165525

Philippe De Ryck @philippederyck.bsky.social · 12/11/2024

In a couple of weeks, I'm teaching two live online workshops, both consisting of a mix between lectures, demos, quizzes, and hands-on lab sessions: - Securing Angular apps on Dec 2-3 (buff.ly/3uX8Rv1) - Bulletproof APIs on Dec 5-6 (buff.ly/48JQM2Y) Hope to see you there! #appsec

040