Hear no Evil, See no Evil, Code no Evil ();
summary
Concrete incident postmortems: Grindr misuse and a stalker using a car app, the ICO site running a crypto miner, Equifax’s failure to layer controls, Optus leaking ~9 million accounts with ~1.2M sensitive IDs after an unauthenticated API and dev systems holding real data, an Apple SSO business‑logic flaw allowing account takeover, and an Uber compromise that escalates via exposed credentials. Covers secure by design and secure by default practices, tailored developer awareness, pen testing and red teaming, MFA/password managers, asset management and the continuous feedback loop for remediation.
AI-written summary · about
chapters (9)
- 0:00Introduction and speaker intro
- 3:33Security as afterthought failure
- 7:32Real-world breach examples
- 11:04Lessons from failures
- 17:53Secure by Design principles
- 21:44Learning from industry reports
- 25:39Secure by Design vs by default
- 28:04Positive impact of security culture
- 29:10Takeaways and closing
related talks
01h 24mCode Red: Navigating the Minefield of Security Programming Blunders
35mKeynote: Think Like a Hacker
35mCYBERSECURITY! The good, the bad, and the hacked
17mPrivacy Design Flaws
16mSecurity, Fraud, and Compliance
58mSocial Engineering: Hacking Humans
36mPrivacy, Consent and Security Within Modern Applications
10mBe Agile with Security