ChicagoWebConf 2015

I've worked on some very sensitive front-end codebases (at banks, pharma, defence and others) during those times I think I've come across every type of bad (and lots of good!) security practice. In this session I'll share some of those experiences and lessons, and talk about the part security plays in delivering high quality client-side JavaScript.

Including:

- Why you don't control your run-time environment and why that's such a problem.
- Some inherent problems with JavaScript's security model and design
- How modern API's are changing JavaScript's threat model
- Patterns and anti-patterns in front-end penetration testing and auditing
- Why security it's so important to high quality code, and why you're probably not thinking about it enough