How I Learned To Be Paranoid and Loved It
summary
Describes applying pre-mortem threat modeling, concrete failures (Sidekiq jobs running twice, missing unique DB indexes, retry=false) and how modest apps can suddenly hold 1000x more value. Recommends a hot/cold wallet split with a 3-of-4 multisig cold store, using the blockchain as a message bus so deposits go straight to cold storage and the app holds tokens, and suggests service-oriented components, signatures for proof-of-reserves, and pragmatic use of Kubernetes to reduce blast radius.
AI-written summary · about
chapters (11)
- 0:00Introduction and self-intro
- 1:58From Bitcoin app to security fears
- 3:28Pre-mortem for non-financial apps
- 7:11Pre-mortem for crypto apps
- 9:21Scaling security with value
- 10:25Best practices and KISS
- 12:38Decentralizing trust with cold storage
- 15:54Blockchain as message passing
- 17:46Proving reserves with cryptography
- 18:31Closing thoughts on paranoia
- 19:57Q&A session
related talks
49mAttacking and Defending Blockchains: From Horror Stories to Secure Wallets
40mSecurity today and tomorrow : Adapting the rules to suit technological advances
31mYour Infrastructure Needs to D.I.E.
01h 03mHow I Learned to Stop Worrying and Trust the Cloud
14mAdvanced On-chain Security: Multisig & More
46mApplication security from start to finish
43mSecurity By Design
57mHow Do I Secure My Micro-Services?