2021 OWASP Top Ten: Cryptographic Failures

[@ruthfehilly8640]

Really really good videos. Quick and to the point

[@devcentral]

Thanks Ruth! Glad you enjoyed them and we appreciate the comment!!

[@covfefe2936]

Amazing video!! Love this straight forward format easy to remember

[@devcentral]

Thanks for the comment and glad you enjoyed the video!!

[@juliozaelsantillanruiz8997]

Very clear, thanks man, nice video 👍

[@EasyPickens999]

Hi, first of all many thanks for the videos. In your first example you mention to avoid auto-decryption. Do you mean between the DB and the app? In the case of a user querying CC numbers, you would eventually need to decrypt, would this be done in the app?

[@vishaliselvaraj1340]

perfect sir!

[@skselim8536]

Awesome 🌟

[@devcentral]

Glad you liked it and thanks for the comment!

[@BhargavRajaram]

These guys have just narrated what's there on OWASP website.

[@hammasahmed5592]

Failure, I was expecting a failure in the algorithm that would lead to data exposure, not a failure in cryptographic setup. The good point its the downgrade attack, if it's possible to downgrade a version of cryptos, this would actually be a failure.

[@seyedmohammadmortezasanaie8346]

Your explanation was very bad. This beautiful type of attack could have much better examples 👎