{
 "id": 36997,
 "slug": "2019-09-27_in-ynternasjonale-hackerskonferinsje-besykje",
 "url": "https://agents.willem.com/fy/posts/2019-09-27_in-ynternasjonale-hackerskonferinsje-besykje/",
 "source_url": "https://willem.com/fy/2019-09-27_in-ynternasjonale-hackerskonferinsje-besykje/",
 "language": "fy",
 "date": "2019-09-27",
 "published": "2019-09-27T00:00:00+02:00",
 "created": "2025-06-26T22:10:09.537000+02:00",
 "updated": "2026-10-20T09:22:29.973000+02:00",
 "title": "In ynternasjonale hackerskonferinsje besykje",
 "subtitle": "OWASP Global AppSec Amsterdam",
 "summary": "Dizze moanne hie ik it gelok om Global AppSec Amsterdam by te wenjen, in ynternasjonale konferinsje foar hackers en feiligensspesjalisten. Der wiene presintaasjes fan eardere ynljochtingsaginten, bounty hunters, wittenskippers en softwareleveransiers. Ik learde oer guon fan de nijste hackingtechniken, moete nijsgjirrige minsken en spile wat knappe retrospultsjes. Lês mei foar mear.",
 "topics": [
  "Amsterdam",
  "Nintendo",
  "cyber-security",
  "data",
  "hacking",
  "people",
  "work"
 ],
 "author": {
  "name": "Willem L. Middelkoop",
  "url": "https://willem.com"
 },
 "provenance": {
  "kind": "model",
  "method": "Claude Sonnet, two passes (translation, then proofreading) against a glossary and the Fryske Akademy Foarkarswurdlist (hunspell fy_NL); official 2015 spelling",
  "date": "2026-10-20",
  "reviewed_by_native_reader": false,
  "language": "fy",
  "source_language": "en"
 },
 "translations": [
  {
   "language": "en",
   "title": "Visiting an international hackers conference",
   "url": "https://agents.willem.com/en/posts/2019-09-27_visiting-an-international-hackers-conference/",
   "source_url": "https://willem.com/en/2019-09-27_visiting-an-international-hackers-conference/"
  },
  {
   "language": "nl",
   "title": "Het bezoeken van een internationale hackersconferentie",
   "url": "https://agents.willem.com/nl/posts/2019-09-27_het-bezoeken-van-een-internationale-hackersconferentie/",
   "source_url": "https://willem.com/nl/2019-09-27_het-bezoeken-van-een-internationale-hackersconferentie/"
  },
  {
   "language": "de",
   "title": "Besuch einer internationalen Hackerkonferenz",
   "url": "https://agents.willem.com/de/posts/2019-09-27_besuch-einer-internationalen-hackerkonferenz/",
   "source_url": "https://willem.com/de/2019-09-27_besuch-einer-internationalen-hackerkonferenz/"
  },
  {
   "language": "es",
   "title": "Visita a una conferencia internacional de hackers",
   "url": "https://agents.willem.com/es/posts/2019-09-27_visita-a-una-conferencia-internacional-de-hackers/",
   "source_url": "https://willem.com/es/2019-09-27_visita-a-una-conferencia-internacional-de-hackers/"
  },
  {
   "language": "fr",
   "title": "Visite d'une conférence internationale de hackers",
   "url": "https://agents.willem.com/fr/posts/2019-09-27_visite-d-une-conference-internationale-de-hackers/",
   "source_url": "https://willem.com/fr/2019-09-27_visite-d-une-conference-internationale-de-hackers/"
  },
  {
   "language": "it",
   "title": "Visita a una conferenza internazionale di hacker",
   "url": "https://agents.willem.com/it/posts/2019-09-27_visita-a-una-conferenza-internazionale-di-hacker/",
   "source_url": "https://willem.com/it/2019-09-27_visita-a-una-conferenza-internazionale-di-hacker/"
  },
  {
   "language": "pt",
   "title": "Visitar uma conferência internacional de hackers",
   "url": "https://agents.willem.com/pt/posts/2019-09-27_visitar-uma-conferencia-internacional-de-hackers/",
   "source_url": "https://willem.com/pt/2019-09-27_visitar-uma-conferencia-internacional-de-hackers/"
  },
  {
   "language": "pap",
   "title": "Bishita un konferensia internashonal di hacker",
   "url": "https://agents.willem.com/pap/posts/2019-09-27_bishita-un-konferensia-internashonal-di-hacker/",
   "source_url": "https://willem.com/pap/2019-09-27_bishita-un-konferensia-internashonal-di-hacker/"
  }
 ],
 "image": "https://willem.com/global/images/cb5ea75db8ba.webp",
 "image_width": 2560,
 "images": [
  {
   "url": "https://willem.com/global/images/403811a3464b.webp",
   "description": "Global AppSec-Amsterdam",
   "manager_file": "148-bf2d6faf6057f115dc72e82d984e71359f16b48d8c42b4b41c2ee918cf46b556_ContentAsPost_36997_images-1.jpg"
  },
  {
   "url": "https://willem.com/global/images/8d317a6e37bb.webp",
   "description": "Keynote fan cyberoarlochspesjalist Chris Kubecka",
   "manager_file": "148-bf2d6faf6057f115dc72e82d984e71359f16b48d8c42b4b41c2ee918cf46b556_ContentAsPost_36997_images-2.jpg"
  },
  {
   "url": "https://willem.com/global/images/ad3f0bba8321.webp",
   "description": "Lessen út it omgean mei terroristen",
   "manager_file": "148-bf2d6faf6057f115dc72e82d984e71359f16b48d8c42b4b41c2ee918cf46b556_ContentAsPost_36997_images-3.jpg"
  },
  {
   "url": "https://willem.com/global/images/86cc76d31a28.webp",
   "description": "Kofje en PONG op de fideospultsjekonsole mei CRT-monitor",
   "manager_file": "148-bf2d6faf6057f115dc72e82d984e71359f16b48d8c42b4b41c2ee918cf46b556_ContentAsPost_36997_images-4.jpg"
  },
  {
   "url": "https://willem.com/global/images/3ebd793dd0c1.webp",
   "description": "DuckHunt mei in orizjinele Nintendo-zapper",
   "manager_file": "148-bf2d6faf6057f115dc72e82d984e71359f16b48d8c42b4b41c2ee918cf46b556_ContentAsPost_36997_images-5.jpg"
  },
  {
   "url": "https://willem.com/global/images/5ac85970a721.webp",
   "description": "Tink do noch oan de tiid dat dit dyn gewoane kompjûter wie? Let op it IBM model M toetseboerd... o jonge!",
   "manager_file": "148-bf2d6faf6057f115dc72e82d984e71359f16b48d8c42b4b41c2ee918cf46b556_ContentAsPost_36997_images-6.jpg"
  },
  {
   "url": "https://willem.com/global/images/f7a3c90be9d0.webp",
   "description": "Persistent Client-Side XSS is in echte bedriging - troch Marius Steffens en Ben Stock",
   "manager_file": "148-bf2d6faf6057f115dc72e82d984e71359f16b48d8c42b4b41c2ee918cf46b556_ContentAsPost_36997_images-7.jpg"
  },
  {
   "url": "https://willem.com/global/images/aa04e0114bcd.webp",
   "description": "James Kettle oer it hacken fan PayPal - $38.900 oan bounties",
   "manager_file": "148-bf2d6faf6057f115dc72e82d984e71359f16b48d8c42b4b41c2ee918cf46b556_ContentAsPost_36997_images-8.jpg"
  },
  {
   "url": "https://willem.com/global/images/3c11c554de6f.webp",
   "description": "Hackingrendemint op ynvestearring tusken 100% oan de legere kant en 150.000% oan de hegere kant! (Troch Jarrod Overson)",
   "manager_file": "148-bf2d6faf6057f115dc72e82d984e71359f16b48d8c42b4b41c2ee918cf46b556_ContentAsPost_36997_images-9.jpg"
  },
  {
   "url": "https://willem.com/global/images/d039827bdd65.webp",
   "description": "Google hacke - Hoe't ik dyn foto's fan Google stelle kinne hie (Gergö Turcsányi)",
   "manager_file": "148-bf2d6faf6057f115dc72e82d984e71359f16b48d8c42b4b41c2ee918cf46b556_ContentAsPost_36997_images-10.jpg"
  },
  {
   "url": "https://willem.com/global/images/1053cb217048.webp",
   "description": "Global AppSec Amsterdam",
   "manager_file": "148-bf2d6faf6057f115dc72e82d984e71359f16b48d8c42b4b41c2ee918cf46b556_ContentAsPost_36997_images-11.jpg"
  }
 ],
 "text": "OWASP Foundation en Global AppSec Amsterdam\nDe OWASP Foundation is in non-profitorganisaasje dy't har ynset foar it meitsjen fan ark, dokumintaasje, forums en konferinsjes oer softwarefeiligens. OWASP is bysûnder om't it frij is fan kommersjele druk en net ferbûn is mei in technologybedriuw. Se geane derfan út dat applikaasjefeiligens in probleem fan minsken, prosessen en technology is, want de meast effektive oanpakken foar applikaasjefeiligens befetsje ferbetterings op al dizze mêden. Mear oer OWASP is te finen op https://www.owasp.org.\nDe Global AppSec-eveneminten wurde oer de hiele wrâld organisearre. Dizze septimber wie der sa'n evenemint yn myn thússtêd Amsterdam. Sjoch yn harren_programma (https://www.owasp.org/index.php/OWASP_Events/upcoming_events) oft OWASP ek nei dyn stêd komt.\nWannear't cyberfeiligens echt wurdt: terroristen ûnskealik meitsje\nIen fan de meast yndrukwekkende ferhalen waard ferteld troch Chris_Kubecka (https://en.wikipedia.org/wiki/Chris_Kubecka), in frou dy't wurke hat foar de US Air Force en it United States Space Command. Se is ûndersiker op it mêd fan kompjûterfeiligens en spesjalist yn cyberoarloch.\nSe fertelt oer har wurk by de Keninklike Saûdy-Arabyske ambassade yn Den Haach. It is hiel nijsgjirrich om te hearren hoe't de pleatslike plysje, it Diplomatike Korps en spesjale aginten belutsen wiene om úteinlik in bomoanslach op it Kurhaus_yn_Scheveningen (https://en.wikipedia.org/wiki/Kurhaus_(Scheveningen) te foarkommen. Fan sokke ferhalen besefst do dat net alles wat bart yn it nijs komt!\nKofje en spultsjes\nNei de keynote oer terroristen, cyberoarloch en bomoanslaggen wie it tiid foar kofje en spultsjes. Retrospultsjes spylje is in noflike manier om oare hackers op de konferinsje te moetsjen, want do hast fansels wat dêr't jim oer prate kinne. Dat is handich, want de measte IT-saakkundigen hawwe wat help nedich om it iis te brekken as it op sosjalisearjen oankomt...\nHackingtechniken\nNei de kofje wiene der ferskate sesjes dy't do bywenje kinst. Ik haw der in pear keazen op grûn fan myn persoanlike ynteresses en myn wurk.\nPersistent Client-Side XSS\nIen fan de praatsjes dy't ik bywenne gie oer it oanfallen fan websites mei Local Storage of cookies. Treflik neamd \"Don't trust the locals\" wie de presintaasje fan Marius_Steffens (https://cispa.saarland/people/marius.steffens/) en Ben_Stock (https://cispa.saarland/people/ben.stock/) hiel nijsgjirrich. Harren akademysk ûndersyk lei oan it ljocht dat in protte websites kwetsber binne foar bedrigingen dy't in permaninte foet yn 'e doar krije!\nPayPal hacke mei in HTTP desync-oanfal\nYn syn briljante praat beskriuwt James_Kettle (https://portswigger.net/research/http-desync-attacks-request-smuggling-reborn) syn ûndersyk nei mooglik ien fan de gefaarlikste hackingtechniken op it moderne web: HTTP_Request_Smuggling_troch_HTTP-fersiken_te_desynchronisearjen (https://portswigger.net/research/http-desync-attacks-request-smuggling-reborn). Dizze technyk makket gebrûk fan kwetsberheden as in website in content delivery network (CDN), in webcache of in web application firewall (WAF) brûkt. It is geweldich om dit te learen, om it ûnderlizzende prinsipe te begripen en om te learen hoe't do dy tsjin sa'n soart oanfal ferdigenje kinst.\nHackingekonomy: wat is in kompromittearre akkount wurdich?\nYn in oar nijsgjirrich praatsje leit Jarrod_Overson (https://jarrodoverson.com) de stân fan credential_stuffing_oanfallen (https://jarrodoverson.com/post/no-2fa-does-not-stop-credential-stuffing-attacks-79de7476a80a/) út. Dit soarte oanfal brûkt lekke akkountnammen en wachtwurden op ferskillende websites, wat ferrassend suksesfol is, want in soad minsken brûke itselde wachtwurd op ferskate siden. Hy leit út hoe_CAPTCHAS_omseile_wurde_kinne (https://jarrodoverson.com/post/bypassing-captchas-with-headless-chrome-93f294518337/) en hoe't hackers harren malware minsklik gedrach neimitearje litte foar fraude. Hy konkludearret dat fraude in minsklik probleem is, gjin technysk - oandreaun troch ienfâldige ekonomy: it is it wurdich om te hacken!\nHackersmentaliteit\nYn syn praatsje fertelt Gergö_Turcsányi (https://twitter.com/gergoturcsanyi?lang=en) hoe't hy bounty hunter waard. Hy leit út dat do gjin bysûnder betûfte wiskundige hoegest te wêzen om dit te dwaan, alles wat do nedich hast is wat kreativiteit en wat tiid om wat rûn te snuffeljen. Op it lêst late dat der ta dat hy Google mei súkses hacke koe!\nKonklúzje\nGlobal AppSec besykje wie fantastysk! It is in privileezje om oare hackers te moetsjen, fan har te learen en te hearren oer dingen dy't do normaal net yn it nijs sjochst.\nWat do ek meinimst fan in konferinsje, der is altyd wat dêr't do net op rekkene hiest dat do leare soest. It is dit ûnferwachte learen dat konferinsjes besykje de muoite wurdich makket!",
 "word_count": 645,
 "markdown_url": "https://agents.willem.com/fy/posts/2019-09-27_in-ynternasjonale-hackerskonferinsje-besykje/post.md"
}