My trainings
And this is what they say about them: Originally, I've arranged Michal's training primarily for my colleagues because "of course I already know these things"... Michal has changed my mind in the first hour of the first day and continued to do so for the whole two days. Thanks to this training I finally understood some of the attack/defense concepts in full depth, and especially in the right context. — Jan Pospíšil, Senior PHP developer, Czech Radio
Public trainings
Come to my public trainings, everybody's welcome:
- PHP application security March 15–18, 2021 remoteafternoons
- HTTPS for developers and admins March 23–24, 2021 remoteafternoons
Trainings in Prague (or remote) are held regularly in the middle of March, June, September, and December, in other cities irregularly.
In-house trainings
Any public training can also be turned into an in-house training. As an extra, I offer these in-house-only courses:
Looking for Introduction to PHP, Classes and objects in PHP? I've handed them over to Martin Hujer. I've discontinued Web application performance, Martin Michálek runs a similar training.
My articles
Some time ago, I've change my Google password. That change logged me out of my Google account on my iPad so Photos, Chrome, and other apps were asking again for my password to log me back in. The only problem was that all I could see, was a blank page instead of the Google login form, or just -- (NSURLErrorDomain: -999)
error.
At the end of August, a critical security bug was discovered and immediately fixed in one of the popular PHP frameworks, Nette. Although the author of the framework, David Grudl, did everything possible, some did not learn about the bug in time and did not update their sites and web apps. Let me tell you a few tips not only for PHP, that will help you to know about similar problems as soon as possible.
I'm organizing another round of my training, this time remotely. Afternoons, for half of the regular price.
My talks
Favorites
- HTTP hlavičky, Subresource Integrity a spol. chrání vaše návštěvníky před bezpečnostními chybami
- XSS PHP CSP ETC OMG WTF BBQ, o Cross-Site Scriptingu a Content Security Policy
- Hlava není na hesla, použijte na ně raději password manager
- HTTPS, co, proč, jak, zač, nač, kdy, kde, s kým a proti komu
- Webová bezpečnost, popis několika základních útoků i méně známých triků
- Jak jsme zlepšili zabezpečení Slevomatu a jak byste měli udělat to samé
- Zahashovat heslo, uložit, …, profit!, o správném hashování hesel
Upcoming talks
…at your event or conference, let me know!
Talks
Hlava není na Heslo123!
December 3, 2020, ALEF Security Talk – vzdělávání (20 minutes)
Co si nezařídíš, to nemáš
December 1, 2020, TopMonks Caffè: Weby v roce 2020 (30 minutes)
Novinky v browserech z pohledu bezpečnosti
November 11, 2020, JavaDays 2020 (60 minutes)
Hacknul jsem vás, ale v pohodě
November 6, 2020, LAW FIT Kyberbezpečnost (25 minutes)
Co nového v browserech (z pohledu bezpečnosti)
October 3, 2020, LinuxDays 2020 (50 minutes)
Me answering questions
Engage in Continual Learning to Advance your IT Career
May 3, 2019, IT Career Energizer
Michal Špaček z Report URI o smyslu práce, potenciálu i prokrastinaci
January 15, 2019, StartupJobs
Blokování webů a stránek
June 4, 2016, Český rozhlas Online Plus
Na 11. srazu Na volné noze
June 4, 2016, 11. sraz Na volné noze
Webový vývojář musí mít hackerské myšlení
May 30, 2016, Kyberbezpečnost.cz