Sven Hezel

Going live with 🔐 Wesley Cabus - Are you sure your access tokens are really secure? https://lnkd.in/eNsdjybf JSON Web Tokens (JWTs) are the industry standard for API security, but common misconfigurations often leave applications vulnerable to sophisticated exploits. This session explores critical pitfalls in token validation and how to choose the most secure architecture for your specific needs. In this session, you’ll learn critical vulnerabilities of JWTs, discover how to automate security testing, and how to evaluate the strategic trade-offs between JWTs and opaque tokens. Wesley will demonstrate some tricks that can bypass improperly configured token validation. He’ll demo how how easy it is to fool your API if you’re not careful. Finally, he’ll walk through how to write tests that ensure your application is protected against these exploits, keeping your data and users safe. #dotnet #identity

17

2 Kommentare

Most agencies assume enterprise delivery requires an enterprise-sized team. Linus Banse of JUNG&BANSE GmbH spoke at the CloudFest WP Business & Agency Summit today, and his agency is a direct argument against that assumption. His is a small senior team delivering complex WordPress projects for enterprise clients. What makes it work: the moment JUNG&BANSE adopted Greyd.Suite, their designers could build sophisticated websites entirely on their own, without third-party tools or external developers. That removed the bottleneck between creative vision and what actually goes live. The results: twice the websites delivered per year, project duration down by a third, and a 30% increase in customer lifetime value. A small team taking on work that most assume requires a much larger one. Read the full case study: https://lnkd.in/dpKjBGSJ #WordPress #CloudFest #AgencyLife #ProductStrategy #WordPressCommunity

13

⚡ What elite performance marketing teams optimize on and what everyone else does. New series. Different vertical each post. Starting with the hardest one: iGaming / Real Money Gaming. In RMG, ~5% of players generate 70–75% of GGR. Where you point your bidding signal decides whether you ever acquire them. Here's the maturity ladder I see across operators: Level 1: Install or registration CPA. Cheapest users win. Bonus hunters love you. Level 2: FTD CPA. Where most of the industry sits. Feels rigorous, but a $10 one-time depositor and a future whale are identical events to the algorithm. So it finds you more $10 churners. Level 3: D7 ROAS. Value finally enters the picture. The flaw: whales only become distinguishable from normal players around D30. At D7 you're optimizing on early luck and bonus mechanics, not player quality. Level 4: Predicted D90 GGR. Elite teams forecast each player's long-horizon value within hours of install and train the platforms on who players will become with capped, engineered signals, not raw deposit events. Here's the uncomfortable part: moving from Level 2 to Level 3 feels like progress. The data says the real gap is between 3 and 4. Three questions to locate yourself: What % of your FTDs still deposit at D30? What share of GGR sits in your top 5%, and can your bidding signal identify them? Are you sending raw deposit values to Meta/Google, or engineered ones? Next post: why the D7 window specifically punishes sportsbooks. If you're on an iGaming or RMG growth team, curious where your team sits on this ladder. Comment or DM, genuinely interested in the spread #igaming #performancemarketing

35

6 Kommentare

Mandatory from summer 2026: Withdrawal button in online shops The German Federal Council has approved a new law that affects all online merchants. From June 19, 2026, online shops must provide a clearly visible withdrawal button. Canceling a contract must be as easy as completing a purchase. Based on an EU directive, all member states must implement it, with timing and details varying by country. What does this mean in practice? ▪️The existing 14-day withdrawal right must be exercisable via the button ▪️Applies to all products and services, including digital ones ▪️No login required ▪️The button must be clearly labeled (e.g. “Cancel contract”) ▪️It must be easy to find and visually highlighted This clearly strengthens consumer protection. For online shops, however, implementation comes with real challenges. Technical and legal effort: Shops need backend logic for identification, deadline handling, and legally compliant documentation. That means time, cost, and legal risk. Data protection challenges: Especially for guest checkouts, implementation is tricky. Handling cancellations without violating GDPR requirements is not straightforward. Non-compliance can lead to fines and legal warnings. At the same time, the law forces shops to become more transparent and fair. What’s your take: A sensible regulation to strengthen consumer protection or an unreasonable burden for online shops?

23

1 Kommentar

The topic of sub-network fraud is still causing problems for many customers. Since many affiliates are switching to sub-networks, blind spots are created that many monitoring tools are unable to handle. This makes it even more important to implement comprehensive monitoring in order to prevent fraud in affiliate marketing. Stop fraud! #subnetworks #affiliatefraud #stopfraud

9