Discussion - White Hat Hacking, Session 7
summary
Argues that operational security—DNS, front ends, private keys—causes the biggest losses and requires continuous threat modeling from day one, monitoring of web2 infra, and developer-pipeline checks rather than relying on last‑minute fixes. Recommends basic digital hygiene (2FA, cautious links) and layered defenses, discusses governance pause tradeoffs and vault designs, and defends a practical bug‑bounty price rule (roughly 10% bounty rule, or 1–10% with absolute caps) while exploring better price‑discovery and insurance overlays.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 0:22Operational security in crypto
- 2:31Threat modeling foundation
- 5:00Digital hygiene basics
- 6:24Myth of silver bullets
- 8:55Immutability dilemma
- 11:00Bug bounty risks
- 13:08Web3 vs Web2 bounties
- 15:35Internal fraud prevention
- 16:17UX as security layer
- 17:21Bounty payouts vs risk
- 20:12Bug bounty pricing
related talks
33mInterview with
16mDesigning Holistic Security Programs
35mCYBERSECURITY! The good, the bad, and the hacked
44mSecurity Lessons for Early Adopters
57mMaking Security Priority Zero
41mSecurity: The world is broken and you are guilty
42mReal-World Security Implementations and Key Lessons
21mhow to reconcile high-performance hosting and innovation projects with IT security