Beyond Code and Clicks: UX Insights to Security Software
summary
Usability directly changes security outcomes with concrete fixes and tools not platitudes for example the AWS S3 outage from a mistyped command and an AES GCM misuse that left 100 million phones vulnerable show small errors cause huge impact The team builds a TruffleHog terminal UI to improve discoverability and runs secret verification and metadata gathering automatically They describe Repo Man evolving into Repo Kid with undo to auto-apply least privilege yet restore on failure and recommend pre commit hooks to prevent leaked secrets early
AI-written summary · about
chapters (6)
- 0:00Introduction and setup
- 2:46Security UX beyond visuals
- 7:22Human-computer interaction basics
- 10:27Discount usability engineering
- 15:46Applying heuristics to security
- 26:31Key takeaways and Q&A
related talks
29mSecurity by(e) Design?
17mSecure by Design: Usable Security Tooling
40mKEYNOTE: Delivering software that is secure & usable - who’s job is it?
49mFrom Application Security to Developer Security
39mSecurity in a DevOps World
40mClosing Keynote: New Era of Software with modern Application Security
47mHow to 10X Your Company’s Security (Without a Series D)
38mAdventures in Cloud Security: What DevOps Can Learn from a Security Engineer