XConf Australia 2021
who it's for
security engineers, platform engineers, privacy engineers, devops engineers, engineering managers, product designers, compliance officers
topics
passwordless with FIDO2 WebAuthN; personal online data store (Solid); data minimization and auditing; data contracts (YAML AVRO JSON); landing and encrypted zones; AWS S3 KMS encryption checks; compliance as code with Chef InSpec; managed identities and SCIM; tokenization masking and redaction; threat modelling and psychological safety
| title | author | length |
|---|---|---|
| Tech for people, not users, and the role of human rights in design | Lizzie O'Shea | 31m |
Argues that technology often harms people when it works as intended, citing Robodebt (algorithmically assigned debts to tens of thousands, later reversed)… | ||
| Building a secure data platform: why good design and security go hand in hand | Harmeet Kaur Sokhi | 39m |
Claims that Australian breaches cost about 3.35 million AUD and rise 9.8% year on year drive concrete steps: classify at onboarding with simple tiers or… | ||
| Digital trust and the architecture of participation | Scott Davis | 43m |
Demonstrates a concrete claim: move from vendor-held clouds to Tim Berners-Lee’s Solid personal online data store model, already in pilots with Inrupt + NHS… | ||
| Passwordless: a story of risk, protection and excellent UX | Kelsey van Haaster | 43m |
ThoughtWorks runs a live experiment with 120 volunteers (now growing) replacing passwords with FIDO2/WebAuthN plus Okta Verify for step‑up, registering device… | ||
| The **** we've seen | Peter Barnes | 30m |
Most incidents come from long‑running brownfield systems—about 80% legacy assets, <5% greenfield and ~15% modernization—where vulnerable code, out‑of‑date… | ||
| The psychology of security: Why we make mistakes | Diana Adorno | 31m |
Human “error” results from attention limits, pressure, context and satisficing rather than malice: a benign cover-design site installs malware and attention on… | ||
| Trust teams but verify: compliance as code done right | Effy Elden, Eugene Kariba | 39m |
Explains how to turn policies into executable controls, for example requiring AWS S3 KMS encryption and verifying it with Chef InSpec wired into CI/CD so… | ||
| nothing matches | ||