Is There So Much More Than a Waff in an API?

"There's so much more than a waff in anapi," says John Sutter. "The number one item on that list that we see often is broken object level authorization" The vulnerability lies when you and i are both using the same ap, but i'm able to use my valid token to request your resources. Ht, is for the right reason.

Transcript

Play full episode

The AI-powered Podcast Player

Save insights by tapping your headphones, chat with episodes, discover the best highlights - and more!

Get the app