2017 OWASP Top 10: Security Misconfiguration

[@JuanitoTarroja]

Great video series! Been my reliable resource for OWASP Top 10 web app risks

[@devcentral]

glad you enjoyed them!

[@judgyfudge3674]

Thank you. Subscribed. Good Luck and Keep Learning.

[@devcentral]

glad you enjoyed it!

[@pardeshiaarti]

Amazing Video and explanation is also easy to understand

[@devcentral]

glad you enjoyed it!

[@harsh8429]

How to secure/harden auth component in terms of SAML or other type of authentication?

[@davisli]

The security directives can be handled by F5 WAF, since essentially WAF also acts as a web server on behalf of the real web server. However, I don't think WAF can help with the rest. In my opinion (for discussion), repeatable process can be ensured using BIGIQ 6.0 Config Templates and if an organization is ready, they can also rope in orchestration and automation tools like Red Hat Ansible & Tower to work with BIGIQ/BIGIP. Minimum platform, that's something to be determined during installation time. Even with automation, the deployment team still needs to determine which installer version to use, however, once an organization's security team has identified the most secure version/minimum to run, this process can be repeated to avoid human errors in future installations.

[@ryun_d3v]

Very nice production. Small detail: put your notes closer to the camera so you don't have to look down to read them

[@devcentral]

glad you enjoyed it!

[@lefanous5116]

Are you writing mirrored or is the image mirrored? If the image is mirrored - how is the logo not mirrored on your shrirt? Or did you get that printed mirrored? In any case - great video!

[@mrnobody1286]

He uses a glass board which has led at the top and bottom side. And he records the video behind that glass. He uses marker to write text on that glass. After recording video you must reverse the sight of it. You can google it as "Light board"

[@lefanous5116]

@@mrnobody1286 Yes but if you look at the logo on his shirt - you can see that the logo is not reversed!

[@mrnobody1286]

@@lefanous5116 If you could look at the original video you would see that he actually writes with his right hand. Because of flip the video every think had been mirrored. I think the original looks of logo is a bit different from now. Look at 3:40 of this video : kzbin.info/www/bejne/gmLEpmSArbKGl6M

[@Z0nd4]

Great videos! Next: OWASP 2020?

[@devcentral]

glad you enjoyed them! When OWASP releases the next version (not sure when that will be) then we can record the updated list!

[@denisd8695]

Thanks , your videos are great !!

[@devcentral]

glad you enjoy the videos!

[@mehmetkelepce9688]

do you writing reverse?

[@devcentral]

this video shows you how we do it: kzbin.info/www/bejne/i2iokH9qrKiDisU

[@bigmarkua]

Thanks

[@ytuma5643]

Thank you!

[@devcentral]

glad you enjoyed it!

[@mikelloyd1312]

This video was really helpful until I realized this guy is writing everything backwards and then my brain blew up.

[@devcentral]

glad you enjoyed the video...and sorry for invoking a brain explosion for you! :)

[@gennadyladyrda3946]

It's enough to use a mirror and turn it a bit. Or use special software like these guys :)

[@roinarkis6631]

alrighty :)