Eric Chiang
where else to find them
no profile links on file
what they talk about
where they keep going back
- BSidesSF3 editions2023–2026
on a stage with
- Brandon Weeksonce
who talks about the same things
- Mo Khan11 talks
- Marc Boorshtein7 talks
- Jordan Liggitt7 talks
- Margo Crawford3 talks
- Lucas Käldström14 talks
- Michael Danese3 talks
| title | conference | date |
|---|---|---|
| The Trusted Platform Module | BSidesSF 2026 | 2026-03-21 |
Explains that the TPM is an API spec spanning thousands of pages implemented as discrete chips or fTPM on CPU, and shows live interaction using a Go package… | ||
| Insecurity protocols: an overview of modern authentication | BSidesSF 2024 | 2024-05-04 |
Covers concrete failures and real tools: JWTs suffer a decade‑old alg none library flaw and fragile custom crypto; OAuth2 uses auth code + token exchange with… | ||
| Scalable security: how to win friends and not burn... | BSidesSF 2023 | 2023-04-22 |
Describes running security at Google scale: building controls in audit mode to measure breakage, rolling out to 1%, 2%, 10% to limit tickets, and flipping… | ||
| Binary Policy with IMA and AppArmor | Linux Security Summit North America 2019 | 2019-08-19 |
Google signs binaries from its central repos and enforces them with IMA/EVM signatures applied via a dpkg hook, uses AppArmor profiles that match security… | ||
| Kubernetes Auth and Access Control | KubeCon + CloudNativeCon North America 2016 | 2016-11-08 |
Kubernetes authentication and authorization detail actual mechanisms: x.509 client certs and bearer tokens become usernames and groups, service accounts are… | ||
| nothing matches | ||