Keynote: The Moral Imperatives and Challenges for Modern Application Security
summary
Argues that the vuln‑research‑patch loop fails at scale and that the median new internet user is on a $50 phone in a developing country, not a patched MacBook, so safety metrics matter: measures like account takeover rate and spam/malware volume drive policy. Describes a mobile-number-only login beta with hundreds of thousands of users and zero takeovers, shipping a bundled TLS library into Android apps, warning that SHA‑1 cutoffs affect ~5% globally (20–30% in some countries), and launching ThreatExchange with 102 companies and millions of indicators.
AI-written summary · about
chapters (18)
- 0:00Introduction
- 1:57The Modern Internet
- 4:18Safety
- 7:54Real vs Potential Harm
- 15:01Accepting NonOptimal Solutions
- 20:16SelfProtecting Applications
- 23:47Stop Whining
- 26:42Making Peoples Lives Better
- 28:29Personal Recommendation
- 29:22Open Source
- 30:37App Store Rules
- 34:10Economic Battle
- 36:11BlueBox
- 37:15Facebook
- 40:01Safety at Facebook
- 41:08Suicide Prevention Hotline
- 42:11Compliance and Liability
- 43:47Threat Exchange
related talks
42mKeynote: How much security is too much?
52mPhilosophizing Security In A "Mobile-First" World
01h 00mKeynote - Our Kryptonite: A Defendable Internet
35mKeynote: Think Like a Hacker
18mKeynote
01h 06mKeynote: Devaluing Attack: Disincentivizing Threats Against The Next Billion Devices
23mKeynote: Fireside Chat with Window Snyder & Katherine Druckman
48mHow to Meet the New Mobile Application Security Imperative