Re: [MINUTES] CCG Atlantic Weekly 2026-01-27

Hi everyone,

Thanks again for your presentation Alan!

Here are Alan's slides from last weeks presentation.

Apologies for the delay,
Will

On Wed, Jan 28, 2026 at 12:16 AM Alan Karp <alanhkarp@gmail.com> wrote:

> That's a pretty good summary, but it contains an important mistake.
>
> It says,
>
>    - *Confused Deputy Vulnerability:* A widespread issue where a service
>    incorrectly uses another party's permissions.
>
> that's backwards.  The definition should be
>
>    - *Confused Deputy Vulnerability:* A widespread issue where a service
>    incorrectly uses its own permissions on a resource designated by somebody
>    else.
>
>
> --------------
> Alan Karp
>
>>

Received on Tuesday, 3 February 2026 18:18:42 UTC