Secure Programming of Web Applications - Developers and TPMs (Udemy.com)

Useful information covering real-world examples, many of which I have encountered on projects over the years. Well-organized and succinctly presented. Definitely worth the time and worth revisiting as a valuable resource.

Gostei bastante, bem informativo

Good run through. Well structured, clear recommendations. Good examples, easy to follow.

I had difficulty conceptualizing some of the attacks until the demo's so those were great!

He is very good at delivering the content, he knows the subject matter. Obviously English is not his first language, and there are some grammatical errors, in the text. Also I would like to have seen a few more examples during the lectures.

Good quick course that covers the most common things in web. I'll just leave some feedback if the speaker wants to improve the course: -When talking about authentication/passwords I saw two mistakes: OTP dosen't mean "One time password", it means "One time pad", it only means password in the context of TOTP or HOTP. The other one is the recommendation of password length of 8, that can be bruteforced in less than an hour, you should recommend a bigger number like 12. -For the exam, some things are not explained on the course itself or are ambiguous, I could do it no problem because I work in security and I know the answers anyway (and they are true), but the people target of the course can have problems with that even if they did it paying attention. Let me give you an example: In the question about "secure against brute force", you only talked about bruteforcing against the login, that is why you recommended blocking accounts. In that context, only iterations and another option are relevant (iterations because they slow down each attempt), but you marked also the algorithm itself and salt as options. They are TRUE but ONLY if you also take into account brute forcing the HASH, salt has no impact while bruteforcing words in a login, and same for the algorithm itself. That was never mentioned during the course.

The content on this training was great, but the plainness of the slides made just listening to it kind of dull. I liked the section on CSRF and session hijacking. I wish it included a bit more beyond just examples, like if REST APIs are vulnerable to CSRF. I like that it was only 1.5 hours, that is a lot of content for a short period.

Very good entry-level course into the topic. Sometimes the summaries are rather dense and there is little space to practice, but if you need a compact introduction, it's exactly what you get here. For me it was great to identify those areas where I will be interested in finding more detail in dedicated resources.

It was basic coruse but provided some basic information and that a developer should keep in mind while making comples applications.

The instructor was able to pass the knowledge in simple terms. Though it feels as if one is just viewing a drabby Powerpoint presentation on a white background, but he made his point known nonetheless. Inclusion of quizzes would also help to confirm that the student understands what is being taught. Though, all in all, it's still a good one.