AppSecCali 2015: Marshalling Pickles by frohoffAppSecCali 2015: Marshalling Pickles how deserializing objects will ruin your day by @frohoff and @gebl Note: see the more recent presentation on Java Deserialization: Deserialize My Shorts: Or How I Learned To Start Worrying and Hate Java Object Deserialization Talk Video Slides Event Object serialization technologies allow programs to easily convert in-memory objects to and from various binary a
