BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//bsides-cape-town-2025//talk//RSRSQ8
BEGIN:VTIMEZONE
TZID:SAST
BEGIN:STANDARD
DTSTART:20000101T000000
RRULE:FREQ=YEARLY;BYMONTH=1
TZNAME:SAST
TZOFFSETFROM:+0200
TZOFFSETTO:+0200
END:STANDARD
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-bsides-cape-town-2025-RSRSQ8@pretalx.com
DTSTART;TZID=SAST:20251206T153000
DTEND;TZID=SAST:20251206T160000
DESCRIPTION:A free croissant sounds harmless. But when our favourite local 
 coffee shop introduced a new loyalty app\, our curiosity as pentesters kic
 ked in.\n\nThis talk is a light-hearted but deeply practical look at how p
 oor security design can hide in plain sight\, even in something as innocuo
 us as a mobile-based rewards app. We'll walk through how we uncovered desi
 gn flaws in a loyalty system that relied on pressing a physical object aga
 inst your screen to register points. No hard-core exploitation techniques 
 were needed. Just a croissant\, a caffeine fix\, and a feeling that someth
 ing wasn't quite brewed right.
DTSTAMP:20260502T113840Z
LOCATION:Track 2
SUMMARY:Grounds for Concern: What a Coffee App Taught Us About Insecure Des
 ign - Rinya Singh\, Christof Jooste
URL:https://pretalx.com/bsides-cape-town-2025/talk/RSRSQ8/
END:VEVENT
END:VCALENDAR
