NDC Community Tuesday.
summary
A forensic walkthrough shows a multi-step breach: an SQL injection against a bespoke CMS exposes an unsalted MD5 password file, attackers use rainbow tables to recover reusable passwords, then pivot to company G Suite and publish a full email archive — company is effectively destroyed. Demoed real risks: 497 accounts in one password manager, Friday‑afternoon invoice fraud that moves $8,550 before Monday, and emerging threats from real‑time avatar telemetry (NVIDIA Maxine) that can enable convincing remote impersonation. Practical fixes and developer workflows are proposed.
AI-written summary · about
chapters (14)
- 0:00Security introduction
- 27:07Why security matters
- 33:07Computing models history
- 41:11Password vulnerabilities
- 56:16Security vulnerabilities categories
- 1:01:09Social engineering fraud
- 1:12:00Online identity trust
- 1:22:49Panel security concerns
- 1:31:35Developer security education
- 1:50:28Worst security failures
- 2:01:36VPNs necessity
- 2:05:48Convincing leaders
- 2:09:20Security usability failures
- 2:12:28Hacker movies closing
related talks
22mIntegrating Security Measures Throughout Development
35mCYBERSECURITY! The good, the bad, and the hacked
01h 27mProactive Defense: Leveraging Hacker Tools for Early Vulnerability Detection
19mThe toplist of securing your developer workstation
55mHow hacking works
29mThink Like an Attacker: Why Your npm install Is a Hacker's Dream
07mHow using a Password Manager Saved Me $2900
43mDefensive Coding Bootcamp