Coffee With Developers • Apr 19, 2026

Things You Don't Know About Cookies and How to Protect Them - Mohamed Shiralizadeh

Mohamed Shiralizadeh

Mohamed Shiralizadeh reveals why unencrypted cookies make your applications prime targets for credential theft. Master strict HTTP attributes to lock down session management and defeat modern CSRF attacks.

Things You Don't Know About Cookies and How to Protect Them - Mohamed Shiralizadeh thumbnail

Checking access…

Playback and chapters load privately for Free videos.

Matching moments

3:22 min

Applying transport restrictions and cookie security flags

Thomas Konrad · LIVE

6:20 min

Identifying authorization flaws through cookie tampering

Antonio De Mello +1 · LIVE

2:52 min

Overcoming historical web caching and privacy challenges

Thomas Steiner · Coffee With Developers

5:29 min

Blocking browser cookie theft and dangerous terminal commands

Luke Hinds · Coffee With Developers

4:56 min

Fixing cryptographic failures by enforcing encrypted transport

Christian Wenz

Christian Wenz · World Congress 2026 Europe

3:05 min

Securing applications with HTTP response headers

Jakub Andrzejewski · World Congress 2023

More from Coffee With Developers

Transforming Tech Hiring with AI - Philipp Richter thumbnail

Transforming Tech Hiring with AI

Philipp Richter +2

2 days ago

Agentic Software Engineering thumbnail

Agentic Software Engineering

Dr. Ralf S. Engelschall +2

2 weeks ago

Using Agents to Curate the Content You See Online - Dan Gish thumbnail

Using Agents to Curate the Content You See Online

Dan Gish

Aug 2026

AI Vector Search at Scale - Ewa Szyszka - Ewa Szyszka thumbnail

AI Vector Search at Scale - Ewa Szyszka

Ewa Szyszka

Aug 2026

What is Cross-Origin Storage - Thomas Steiner thumbnail

What is Cross-Origin Storage

Thomas Steiner

Aug 2026

Women in AI - Nalini Garg thumbnail

Women in AI

Nalini Garg

Aug 2026

Upcoming sessions on this topic

Supply Chain Security for the Everyday Engineer

Pradumna Saraf

Kestra Technologies

Quality Assurance Engineer

Shipping MCP to Real Users: Scaling, Auth, and the PII Leak You Didn't See Coming

Hadar Geva

Myop

CTO & Co-founder

Cloud Sovereignty Is an Architecture Problem: Patterns for Modern Platform Teams

Josephine Eskaline Joyce

IBM India Pvt Ltd

STSM, Chief Architect
Norton Stanley

IBM

Storage Architect

Your Server-Rendered App Doesn't Know Who It's Talking To

Anshul Bansal

OLX India

Principal Architect

When Caches Lie: Solving Transactional Integrity and Distributed Race Conditions in Spring Boot

Shuchita Prasad

JPMorgan

Senior Lead Engineer

Speed or Security? Why Not Both for Your Coding Agents

Ajeet Raina

Docker

Developer Advocate

Related videos

Bulletproof Web Applications: The 2025 OWASP Top Ten thumbnail

Bulletproof Web Applications: The 2025 OWASP Top Ten

Christian Wenz · Actition

World Congress Europe · 2026

101 Typical Security Pitfalls thumbnail

101 Typical Security Pitfalls

Alexander Pirker

World Congress · 2022

MFA? Game over! Watch your protection collapse – live thumbnail

MFA? Game over! Watch your protection collapse – live

Christoph Menzel · Inovex

World Congress Europe · 2026

How to Defend Against Data Manipulation Attacks - Bozidar Spirovski & Wekoslav Stefanovski thumbnail

How to Defend Against Data Manipulation Attacks - Bozidar Spirovski & Wekoslav Stefanovski

Bozidar Spirovski +1

Coffee With Developers · Mar 2026

Going Beyond Passwords: The Future of User Authentication thumbnail

Going Beyond Passwords: The Future of User Authentication

Gift Egwuenu

World Congress · 2023

Software Security 101: Secure Coding Basics thumbnail

Software Security 101: Secure Coding Basics

Thomas Konrad

World Congress · 2021

Related articles

DC

Daniel Cranney

What are Cookies and Why Do We Use Them?

If you’re in the EU, the chances are you’re all too aware that cookies are everywhere. Cookie banners remind us every day that our data is being collected and stored, though when asked whether we c...

7 months ago

A cookie sat on top of developer tools

DC

Daniel Cranney

Understanding and Mitigating Common Web Vulnerabilities

Vulnerabilities exist in many forms on the web, and attackers continue to find creative ways to exploit them. Technological advances like the proliferation of AI are of course exciting nd filled wi...

over 1 year ago

An image with neon lighting featuring a globe and a padlock

HS

Harman Singh

11 Best Practices For PHP Security

PHP is one of the most popular programming languages in use today. It is used by millions of websites, including some of the biggest names on the internet. While PHP is a very powerful language, it...

over 4 years ago

11 Best Practices For PHP Security

CH

Chris Heilmann

Dev Digest 139 - Soft and hard queries

News and ArticlesLet's start with Amelia Wattenberger's excellent essay Bridging the hard and the soft talking about humans and data. Do you sometimes also miss aspects of the early web like a lack...

about 2 years ago

Dev Digest 139 - Soft and hard queries

From learning to earning

Jobs that call for the skills explored in this talk.

about 1 month ago

Cyber Defense & Incident Response

Delivery Hero SE

Lleida (Lérida), Spain

Remote Golang Cybercrime Security Log

about 2 months ago

Cyber Defense & Incident Response

Delivery Hero SE

Remote Golang Cybercrime Security Log

Cyber Defense & Incident Response

Delivery Hero SE

Remote Golang Cybercrime Security Log

about 1 month ago

Cyber Defense & Incident Response

Delivery Hero SE

Remote Golang Cybercrime Security Log

about 1 month ago

Cyber Defense & Incident Response

Delivery Hero SE

Zaragoza, Spain

Remote Golang Cybercrime Security Log

about 2 months ago • Verified

Principal Cybersecurity Engineer

San Jose, United States

Expert $249k–348k Remote Cybersecurity