Don't Worry, Your Credit Card Details Are Safe. BTW Your Kid Is Missing!

Explore a conference talk that uncovers critical security vulnerabilities in a Norwegian parental app, potentially compromising children's privacy and safety. Follow the speaker's journey as they progress from basic security checks to discovering major flaws in authorization, authentication, XSS, CSRF, cookies/tokens, and third-party components. Learn how simple parameter manipulation and basic HTML/JavaScript can lead to complete system compromise. Understand the real-world consequences of poor application security and gain insights into conducting ethical security tests using a web proxy. Discover the importance of responsible disclosure in the cybersecurity field. This 56-minute presentation offers valuable lessons for developers, security professionals, and anyone interested in protecting sensitive data in web applications.

Don't worry, your credit card details are safe. BTW your kid is missing! - Halvor Sakshaug