One shop's timing issue is another mans free dogfood - Even Tillerli - NDC Security 2026

A lighthearted conference talk from NDC Security 2026 where a developer discovers a potential race condition vulnerability in a pet shop's coupon system. By purchasing dog food online and in-store simultaneously, both transactions registered as the free seventh item. The speaker walks through their responsible disclosure attempt (including the lack of a security.txt file and no response from the vendor), and ultimately reflects on the importance of threat modeling, security.txt files, and having proper processes for handling vulnerability reports.