Designing security and safety for billions
summary
Facebook secures 1.13 billion daily users and treats password reuse as the top online harm, having tested over one billion passwords against its user base and notified tens of millions whose credentials appeared on the black market. Concrete defenses include login approvals (SMS and push), trusted contacts for account recovery, an 80-point machine learning login model, bundled crypto in apps, a Tor hidden service, end-to-end encryption for Messenger and WhatsApp, open-source OSQuery, and the ThreatExchange with 450 participating organizations.
AI-written summary · about
chapters (12)
- 0:00Introduction and mission
- 2:59Security vs safety culture
- 5:09Password vulnerabilities and solutions
- 8:21Account protection with machine learning
- 10:30Device security in emerging markets
- 11:54Self-offending apps and Tor access
- 12:56End-to-end encryption in messaging
- 13:17OSQuery and threat hunting
- 14:20Threat Exchange platform
- 15:00User education and safety center
- 15:22Building safety from day one
- 16:27Government collaboration for safety
related talks
31mPlatform Integrity: Lessons Learned in Protecting the Facebook Platform
55mFacebook's Approach To Common Web Vulnerabilities
32mPasswords are so 1990
23mSocial Cybersecurity: Social Influence and Design in End-User Cybersecurity
44m(in)Security is eating the world
42mChallenges in User Authentication: Balancing Security & User Experience
27mAccount Security for the Fashionable App Developer
36mProtecting Users from Deception