Secrets and Lies
summary
Argues that Navajo code stays secret while Enigma fails, contrasts security by obscurity with cryptography, and insists keys—not secrecy of design—matter; demonstrates attackers using strings and decompilers and advocates tools like Hopper, Charles and certificate pinning; recommends moving secrets off-device (proxy calls through a server), using true random 32‑byte keys, XOR masks and honeytokens, monitoring server logs, and accepts that determined reverse engineers win so focus on detection and response rather than futile perfect hiding.
AI-written summary · about
chapters (10)
- 0:00Start
- 0:41English English Letter
- 6:15security through obsurity is
- 7:45obscurity ???
- 18:27Authenticate
- 33:18Certificate Pinning
- 35:38enerate secret
- 43:29Hardening
- 44:341. Obfuscation is for not uses!
- 45:16Secrets
related talks
14mWhen Encryption Fails
55mThe secrets of Cryptography
36mThe Art & Craft of Secrets: Using the Cryptographic Toolbox
30mBehind Closed Doors: Managing Passwords in a Dangerous World
58mKeynote: Crypto means Cryptography!
51m48 Dirty Little Secrets Cryptographers Don’t Want You To Know
43mShhh - Stop Sharing Secrets, a Secure Mindset for Embedded Development
01h 04m Cryptography For Newcomers - The hitchhiker's guide to cipher in devs