Coffee With Developers • Nov 10, 2025

Security Blindspots and How to Learn About Them - Anna Oliveira

Anna Oliveira

Think automated scanners catch every vulnerability? Anna Oliveira built Blind Spot, an open-source CLI game, to help developers manually train their eyes to spot what AI misses.

Starting at 7:36 · Watch from the beginning

Security Blindspots and How to Learn About Them - Anna Oliveira thumbnail

Checking access…

Playback and chapters load privately for Free videos.

Matching moments

4:35 min

Improving developer education with realistic security training environments

Joseph Katsioloudes

Joseph Katsioloudes · World Congress 2025

4:48 min

Using intentionally vulnerable applications for practical security training

Bozidar Spirovski

Bozidar Spirovski +1 · Coffee With Developers

26:47 min

Exploring pathways to application security careers and research workflows

Vandana Verma Sehgal · LIVE

6:12 min

Recommended training platforms for developing security mindsets

Thomas Konrad · World Congress 2021

5:30 min

Identifying non-coding software vulnerabilities and organizational risks

Tino Sokic · World Congress 2023

30 sec

Identifying technical blind spots and exploring open source

Cassidy Williams

Cassidy Williams · Coffee With Developers

More from Coffee With Developers

Transforming Tech Hiring with AI - Philipp Richter thumbnail

Transforming Tech Hiring with AI

Philipp Richter +2

2 days ago

Agentic Software Engineering thumbnail

Agentic Software Engineering

Dr. Ralf S. Engelschall +2

2 weeks ago

Using Agents to Curate the Content You See Online - Dan Gish thumbnail

Using Agents to Curate the Content You See Online

Dan Gish

Aug 2026

AI Vector Search at Scale - Ewa Szyszka - Ewa Szyszka thumbnail

AI Vector Search at Scale - Ewa Szyszka

Ewa Szyszka

Aug 2026

What is Cross-Origin Storage - Thomas Steiner thumbnail

What is Cross-Origin Storage

Thomas Steiner

Aug 2026

Women in AI - Nalini Garg thumbnail

Women in AI

Nalini Garg

Aug 2026

Upcoming sessions on this topic

Supply Chain Security for the Everyday Engineer

Pradumna Saraf

Kestra Technologies

Quality Assurance Engineer

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

Vikram Vaswani

Consultant

Your AI Wrote the Code. Who Vouches for It?

Siddharth Joshi

GitHub

Senior Customer Success Architect

The Illusion of Green: Why AI-Generated Browser Automation Tests Pass Locally but Fail in CI

Puja Jagani

BrowserStack

Lead of Open Source and Developer Advocacy

Beyond vibe coding: Mastering the AI-native SDLC from code to production

Amith Singhee

IBM

Director, IBM Research India and AI for Z, SIL; CTO, IBM India / South Asia

Speed or Security? Why Not Both for Your Coding Agents

Ajeet Raina

Docker

Developer Advocate

Related videos

How GitHub secures open source thumbnail

How GitHub secures open source

Joseph Katsioloudes · GitHub

World Congress · 2025

What The Hack is Web App Sec? thumbnail

What The Hack is Web App Sec?

Jackie

Coffee With Developers · Jun 2025

Simple Steps to Kill DevSec without Giving Up on Security thumbnail

Simple Steps to Kill DevSec without Giving Up on Security

Isaac Evans · Semgrep

World Congress · 2025

The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most thumbnail

The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most

Marcus Wermuth · Safety Cybersecurity

World Congress Europe · 2026

Stranger Danger: Your Java Attack Surface Just Got Bigger thumbnail

Stranger Danger: Your Java Attack Surface Just Got Bigger

Vandana Verma Sehgal

LIVE · Jan 2022

Secure Code Superstars: Empowering Developers and Surpassing Security Challenges Together thumbnail

Secure Code Superstars: Empowering Developers and Surpassing Security Challenges Together

Stefania Chaplin

World Congress · 2022

Related articles

CH

Chris Heilmann

Dev Digest 134 - Where pixels sing?

News and ArticlesWeAreDevelopers LIVE Data and Security Day is on Wednesday, 25/09/2024. Learn about OPC UA Updates, Best Practices for Using GitHub Secrets, Passwordless Web 1.5, Emerging AI Secur...

about 2 years ago

Dev Digest 134 - Where pixels sing?

Dev Digest 105 - Security First

Last Friday's Dev Digest was mostly about security and game topics, so let's take a look what you didn't get in your inbox. We also covered some brand new online courses to get started as a develop...

over 2 years ago

Dev Digest 105 - Security First

CH

Chris Heilmann

Dev Digest 138 - Are you secure about this?

Hello there! This is the 2nd "out of the can" edition of 3 as I am on vacation in Greece eating lovely things on the beach. So, fewer news, but lots of great resources. Many around the topic of sec...

about 2 years ago

Dev Digest 138 - Are you secure about this?

CH

Chris Heilmann

Dev Digest 112 - The True Crime of AI Development

In last Friday's Dev Digest, we had some great AI news, some worrying security threats and a swipe-aware game in CSS with explanations! News and ArticlesLet's kick off with some AI news. Netflix ca...

over 2 years ago

Dev Digest 112 - The True Crime of AI Development

From learning to earning

Jobs that call for the skills explored in this talk.

Staff Developer Advocate, GitHub Security Lab

San Francisco, CA, United States

Experienced $323k Git Github Databases

Product Security Incident Response Analyst

Expert $329k Remote Github Code Review Data Analysis

Senior Software Engineer, Vulnerability Management

Expert $329k Remote Ruby Golang Docker

Staff Security Data Engineer

Experienced Remote Github Airflow Terraform

Senior Incident Response Analyst

Expert $124k Remote Github Code Review Data Analysis

Cyber Defense Specialist

Raiffeisen Bank International AG

€47k Mitre Att&ck Cyber Warfare Cyber Security