Is There So Much More Than a Waff in an API?

"There's so much more than a waff in anapi," says John Sutter. "The number one item on that list that we see often is broken object level authorization" The vulnerability lies when you and i are both using the same ap, but i'm able to use my valid token to request your resources. Ht, is for the right reason.

Transcript

Play full episode

Remember Everything You Learn from Podcasts

Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.

Get the app