2021 OWASP Top Ten: Broken Access Control

[@CameronSpear]

This is a really important question: is this guy really good at writing backwards, or did you get a special mirrored shirt made just for these videos?

[@devcentral]

Thanks for the comment! This is how we produce these: kzbin.info/www/bejne/i2iokH9qrKiDisU

[@CameronSpear]

@@devcentral So you do have special shirts. Nice! Thanks for the reply.

[@MrAdemiM]

@@devcentral should've gone with writing backwards man, i'm kinda disappointed now. nonetheless, awesome videos, needed some of those to refresh some security knowledge!

[@TannerLaMarche]

Hi, F5 DevCentral team. I have a copyright question. Since the information in this video is covered by the Creative Commons License 3.0, is this video, by nature, available to re-use in educational material my company distributes? I've been trying to find good video content covering OWASP Top 10 (instead of making it in-house) and came across your videos. I would like to know if we can redistribute your KZbin series as part of our product?

[@JasonRahm]

You can use the OWASP videos in your training…we only ask that you give proper attribution to F5/DevCentral so that the viewers will know who made these videos.

[@TMLaDesign]

Absolutely, we will give attribution and link to the original video to follow the Creative Commons license - thank you!

[@mohammedyaseerpasha7909]

one of the best explanations so far. Thanks, Man.

[@alekivk]

Broken Volume Control

[@sampalaravikumar1912]

Very good❤

[@BerniesBastelBude]

explained well - thx!

[@devcentral]

Thanks for the comment! Glad you enjoyed the video!

[@patrickborys3490]

The only thing in my head hearing that is HOW T.F. do you write ? I mean is there somewhere and somehow a mirror that let you write like this ? Or do you simple practice to write like that :P?

[@devcentral]

Thanks for the comment! Here's how we produce these: kzbin.info/www/bejne/i2iokH9qrKiDisU

[@lukethelabrador8325]

how is it different from SQL injection? *new to cyber security*

[@devcentral]

Thanks for the comment! Here's the full OWASP Top 10 playlist kzbin.info/www/bejne/q6aaoGmeetiqjLM&ab_channel=F5DevCentral and specifically Injection: kzbin.info/www/bejne/fYTYi4OtqM6fZsk

[@qazwacook1983]

SQL is a different thing yet if you would use a SQL injection to try to log in to a app and end up being succefull it would enter the category of broken access control.

[@RB-qu1lv]

Nice explaination brother.

[@devcentral]

Thanks for watching and we appreciate the comment!

[@harshitdagar]

bekar video kuch smj nhi aaya

[@ahmedgamal1588]

Thanks sir!

[@devcentral]

Most welcome!

[@Double-NH]

Can you illustrate a bit about Record Ownership? What does it mean?

[@isaacsmooth5134]

Basically you limit logged in users to access only the records they own.For example you can login to a system and try to change the Id so that you access another user's data. In this case the system should limit the logged in user to only have access to their own data