Tanya Janca | SheHacksPurple  

7K Followers
644 Following
4.5K Posts

Author of Alice and Bob Learn Secure Coding AND Alice and Bob Learn Application Security!
She/her/lady/woman. shehackspurple.ca

Secure Coding Training and Public Speaking Inquiries & other:
Tanya (at) shehackspurple (dot) ca

#AppSec, #DevSecOps 🌻

SheHacksPurplehttps://shehackspurple.ca
Newsletterhttps://newsletter.shehackspurple.ca
My workshop just got accepted to the #AppSecVillage for Def Con this summer. WOOHOO
It’s #CyberMentoringMonday!!!! Are you looking for a professional mentor or to learn more about InfoSec? Are you experienced and willing to β€˜give back’? Use this thread and hashtag to connect
Guess who's on her way to Vienna Austria for #OWASP Global AppSec? πŸ˜‰

How security-aware are the software developers in your workplace? Or your friends? Or classmates? Do you think that secure coding is common knowledge now? Or do we have work to do still?

#AppSecThursday #talkAppSectome

Join myself and Gavin Klondike on July 2nd, 9 am PT, for Chapter 4 of Alice and Bob Learn Secure Coding!

We will cover:
​‒ secure design
​‒ dependency and supply chain security
​‒ trusted vs untrusted systems
​‒ secure defaults
​‒ allowlists vs blocklists

https://twp.ai/9OXdPG

But more importantly, we talked about *how developers actually work* and how to make security feel doable instead of overwhelming.

The recording is now available if you missed it live!

πŸŽ₯ Watch here: https://twp.ai/ktpg5r

Want invites to future book streams?
πŸ“¬ https://twp.ai/S9AhJb
3/3

Alice and Bob Learn Secure Coding: Chapter 2

YouTube
I sat down with my friend Ray LeBlanc for a deep dive into Chapter 2 of *Alice and Bob Learn Secure Coding*, and we covered practical secure coding topics like:
β€’ secure SDLCs
β€’ input validation
β€’ output encoding
β€’ authentication & authorization
β€’ modern app security fundamentals
2/3
If you’ve ever felt like application security explanations were overly academic, painfully vague, or impossible to apply in real life, this book stream is for you πŸ’œ
https://twp.ai/9OViXL
#appsec
1/3

Topics:
β€’ API security
β€’ mobile app security
β€’ WebSocket security
β€’ serverless security
β€’ IoT security

Katie is brilliant, practical, funny, and incredibly good at explaining complicated security topics! Come ask questions and learn with us πŸ’œ
2/2