February 24-26, 2021
Online, Timezone GMT-5
Hacking JSON Web Tokens
JSON Web Tokens, or JWTs, are a convenient way to bundle up a set of data (called claims), that can be relied upon by intended recipients such as APIs and Databases. They're verified through signatures and can be used in off-line environments!
The chances that things will go wrong are slim. Right?
Let's look at ways in which JWT implementations can go wrong, through live demos, and learn how to make sure we can trust these handy payloads.
The chances that things will go wrong are slim. Right?
Let's look at ways in which JWT implementations can go wrong, through live demos, and learn how to make sure we can trust these handy payloads.
Ben Dechrai
Venn Labs
Ben has spent more than 20 years helping companies improve how they build software, more recently the practical side of agentic engineering: getting tools like Claude Code to deliver production-quality work rather than demos, and structuring repos, prompts and workflows so the output is effective, resilient and secure. That rests on decades of building and shipping product in application security and identity. He is a Microsoft MVP and has given 100+ talks on six continents, including DEF CON.
Online 2021 sponsored by
