ASW #242 - Ten Things I Hate About Lists
23 May - 1 hour 16 minsThe OWASP Top 10 dates back to 2003, when appsec was just settling on terms like cross-site scripting and SQL injection. It's a list that everyone knows about and everyone talks about. But is it still the right model for modern appsec awareness? What if we put that attention and effort elsewhere? Maybe we could have secure defaults instead. Or linters and build tools that point out these flaws. We'll talk about top 10 lists, what we like about them, what we don't like, and what we'd like to see replace them. We'll also test our hosts' knowledge of just how many top 10 lists are out there.
Segment resources:
[OWASP Top 10:2021](https://owasp.org/Top10/) [OWASP API Security Project](...
Series Episodes
Golden SaaS Age, Edge Computing, Cisco/Splunk - Allie Mellen, Theresa Lanowitz, Yoni Shohet, Chris Goettl - ESW #333
2 hours 8 mins
29 September Finished
NarcBots, Blacktech, ZenRat, Chrome, CISOs, Privacy, More News & Aaran Leyland - SWN #329
34 mins
29 September Finished
Supply Chain Security Security with Containers and CI/CD Systems - Kirsten Newcomer - #ASW 256
1 hour 27 mins
26 September Finished
Y3000, Sandman, ShadowSyndicate, MoveIt, Apple, Predator, More News, and Jason Wood - SWN #328
33 mins
26 September Finished
Human Risk Management at Western Governors University - Jake Wilson - BSW #321
1 hour 9 mins
26 September Finished
