WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
Coffee With Developers • Nov 10, 2025

Security Blindspots and How to Learn About Them - Anna Oliveira

Anna Oliveira

Think automated scanners catch every vulnerability? Anna Oliveira built Blind Spot, an open-source CLI game, to help developers manually train their eyes to spot what AI misses.

Pause
Mute Enter Fullscreen
#1 about 4 min

Creating a terminal game for security education

How the challenges of learning secure coding inspired an interactive command-line tool.

#2 about 4 min

Exploring the mechanics of vulnerability spotting

How category filters and multiple-choice questions train developers to identify vulnerabilities.

#3 about 3 min

Sourcing vulnerabilities and encouraging open source collaboration

Using OWASP materials and AI tools to generate security challenges for public contribution.

#4 about 3 min

Contributing data sets without learning Go

How developers can add new security challenges using simple YAML configuration files.

#5 about 2 min

Building terminal user interfaces with Bubble Tea

Leveraging the Bubble Tea library to create visually appealing command-line environments.

#6 about 3 min

Sharing side projects and embracing public feedback

The importance of coding for joy and sharing educational tools despite being a learner.

#7 about 3 min

Balancing automated security scanners with manual reviews

Why understanding application context remains crucial despite the rise of automated scanning platforms.

#8 about 4 min

Transitioning from software engineering to security roles

Navigating career mobility hurdles by introducing security practices within current engineering workflows.

#9 about 4 min

Solidifying engineering concepts by teaching others

How building educational tools and explaining concepts deepens personal technical understanding.

#10 about 2 min

Expanding project accessibility through cultural localization

Plans to translate project content to ensure non-English speakers can access security training.

Matching moments

4:35 min

Improving developer education with realistic security training environments

Joseph Katsioloudes Joseph Katsioloudes · World Congress 2025

4:48 min

Using intentionally vulnerable applications for practical security training

Bozidar Spirovski Bozidar Spirovski +1 · Coffee With Developers

26:47 min

Exploring pathways to application security careers and research workflows

Vandana Verma Sehgal · LIVE

6:12 min

Recommended training platforms for developing security mindsets

Thomas Konrad · World Congress 2021

5:30 min

Identifying non-coding software vulnerabilities and organizational risks

Tino Sokic · World Congress 2023

30 sec

Identifying technical blind spots and exploring open source

Cassidy Williams Cassidy Williams · Coffee With Developers

More from Coffee With Developers

Using Agents to Curate the Content You See Online - Dan Gish thumbnail
12:47
27 days ago

Using Agents to Curate the Content You See Online - Dan Gish

Dan Gish

AI Vector Search at Scale - Ewa Szyszka - Ewa Szyszka thumbnail
11:14
27 days ago

AI Vector Search at Scale - Ewa Szyszka - Ewa Szyszka

Ewa Szyszka

What is Cross-Origin Storage - Thomas Steiner thumbnail
34:51
27 days ago

What is Cross-Origin Storage - Thomas Steiner

Thomas Steiner

Women in AI - Nalini Garg thumbnail
42:19
28 days ago

Women in AI - Nalini Garg

Nalini Garg

Agents and People Dynamics in Shared Chats - Sam Liu thumbnail
37:41
about 1 month ago

Agents and People Dynamics in Shared Chats - Sam Liu

Sam Liu

Why Token Reduction Isn’t Cost Reduction - Dave Anderson & Sarel Weinberger, PhD. thumbnail
41:09
about 1 month ago

Why Token Reduction Isn’t Cost Reduction - Dave Anderson & Sarel Weinberger, PhD.

Dave Anderson, Sarel Weinberger, Phd

Related videos

How GitHub secures open source thumbnail
25:28
World Congress 2025 • about 1 year ago

How GitHub secures open source

Joseph Katsioloudes

Simple Steps to Kill DevSec without Giving Up on Security thumbnail
21:53
World Congress 2025 • about 1 year ago

Simple Steps to Kill DevSec without Giving Up on Security

Isaac Evans

The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most thumbnail
24:33
World Congress 2026 Europe • 3 months ago

The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most

Marcus Wermuth

Stranger Danger: Your Java Attack Surface Just Got Bigger thumbnail
1:58:59
LIVE • over 4 years ago

Stranger Danger: Your Java Attack Surface Just Got Bigger

Vandana Verma Sehgal

Secure Code Superstars: Empowering Developers and Surpassing Security Challenges Together thumbnail
23:34
World Congress 2022 • over 4 years ago

Secure Code Superstars: Empowering Developers and Surpassing Security Challenges Together

Stefania Chaplin

Security Pitfalls for Software Engineers thumbnail
27:32
World Congress 2023 • about 3 years ago

Security Pitfalls for Software Engineers

Jasmin Azemović

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.