In the Trenches During a Software Supply Chain Attack
summary
Covers a real supply‑chain incident: exploits around CVE-2017-5638 and the fallout that exposes process gaps, plus the headline damage of 147 million records stolen. Lists the actual tooling tangled in modern deployments — composer, NPM, Docker, Kubernetes, PostgreSQL, Elasticsearch, RabbitMQ, Redis — and shows a concrete mitigation: branch‑per‑environment deploys using Platform.sh claims 14× faster testing and predictable, zero‑downtime scaling.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 0:52Law of Coder Dynamics
- 2:32Part 1 Childhood Innocence
- 3:52Deploying Code
- 10:07SIS admits
- 17:20The Death of Childhood Innocence
- 25:45The Rebirth of Childhood Innocence
- 29:15Drupal
related talks
25mSupply Chain Attacks
35mSupply Chain Attacks: The New Reality
34mThe Simple, Yet Lethal, Anatomy of a Software Supply Chain Attack
32mBreaking the Chain: Advanced Offensive Strategies in Software Supply Chain
46mApplication security from start to finish
49mWhat Hacking the Planet Taught Us About Defending Supply Chain Attacks
37mSupply Chain Attacks and the Future of Software Delivery
39mSoftware Supply Chain Security