Upgrade to PRO for Only $50/Year—Limited-Time Offer! 🔥

LinkedIn Data Breach 2012 Case Study

Avatar for Cecy C. Cecy C.
November 30, 2021
Technology
0
5.1k

LinkedIn Data Breach 2012 Case Study

Case Study presented for Beyond the Code: Cybersecurity in Context, UC Berkeley, MICS Fall 2021

Avatar for Cecy C.

Cecy C.

November 30, 2021
Tweet

More Decks by Cecy C.

See All by Cecy C.
Surviving Code Reviews & Tech Interviews
Avatar for Cecy C. cecyc
0
100
Vulnerability True: Surviving Brutal Code Reviews and Tech Interviews
Avatar for Cecy C. cecyc
0
160
The Joy of CSS: RailsConf 2019
Avatar for Cecy C. cecyc
0
170
RubyConf 2018 Psychology of Fake News
Avatar for Cecy C. cecyc
0
93
A Retro of Retros: How Sprint Retrospectives Can Be Both Fun and Productive
Avatar for Cecy C. cecyc
0
170
MONKTOBERFEST 2018: Psychology of Fake News
Avatar for Cecy C. cecyc
0
110
From Monolith to Microservice: Building APIs with gRPC & golang
Avatar for Cecy C. cecyc
3
1.8k
Building APIs with GRPC, PHP, and Golang
Avatar for Cecy C. cecyc
1
590
The Psychology of Fake News (And What Tech Can Do About It)
Avatar for Cecy C. cecyc
1
64

Other Decks in Technology

See All in Technology
AI時代の新規LLMプロダクト開発: Findy Insightsを3ヶ月で立ち上げた舞台裏と振り返り
Avatar for Dakuon dakuon
0
350
Amazon Connect アップデート！ AIエージェントにMCPツールを設定してみた！
Avatar for Yosuke Suzuki ysuzuki
0
120
「図面」から「法則」へ 〜メタ視点で読み解く現代のソフトウェアアーキテクチャ〜
Avatar for Satoshi Kobayashi scova0731
0
430
Strands AgentsとNova 2 SonicでS2Sを実践してみた
Avatar for Yuuki Yamashita yama3133
1
1.2k
Microsoft Agent 365 についてゆっくりじっくり理解する！
Avatar for skmkzyk skmkzyk
0
430
マイクロサービスへの5年間 ぶっちゃけ何をしてどうなったか
Avatar for Tomohiro Hashidate joker1007
17
7.3k
Snowflakeで実践する、生成AIを活用した「自然言語によるデータとの対話」
Avatar for Nayuta S. nayuts
0
130
【ServiceNow SNUG Meetup LT deck】WorkFlow Editorの廃止と Flow Designerへの移行戦略
Avatar for NIWATO niwato
0
110
ActiveJobUpdates
Avatar for Kuniaki IGARASHI igaiga
1
280
AIの長期記憶と短期記憶の違いについてAgentCoreを例に深掘ってみた
Avatar for やくも yakumo
4
470
AI時代のワークフロー設計〜Durable Functions / Step Functions / Strands Agents を添えて〜
Avatar for やくも yakumo
3
1.5k
ExpoのインダストリーブースでみたAWSが見せる製造業の未来
Avatar for 濱田孝治 hamadakoji
0
180

Featured

See All Featured
Become a Pro
Avatar for Speaker Deck speakerdeck
PRO
31
5.7k
The Hidden Cost of Media on the Web [PixelPalooza 2025]
Avatar for Tammy Everts tammyeverts
2
120
Lessons Learnt from Crawling 1000+ Websites
Avatar for Charles Meaden charlesmeaden
0
940
Dealing with People You Can't Stand - Big Design 2015
Avatar for Cassini Nazir cassininazir
367
27k
Visualizing Your Data: Incorporating Mongo into Loggly Infrastructure
Avatar for mongodb mongodb
48
9.8k
Navigating the Design Leadership Dip - Product Design Week Design Leaders+ Conference 2024
Avatar for Andy Polaine apolaine
0
110
Chasing Engaging Ingredients in Design
Avatar for Sebastian Deterding codingconduct
0
77
Scaling GitHub
Avatar for Zach Holman holman
464
140k
技術選定の審美眼（2025年版） / Understanding the Spiral of Technologies 2025 edition
Avatar for Takuto Wada twada
PRO
115
91k
Optimising Largest Contentful Paint
Avatar for Harry Roberts csswizardry
37
3.5k
My Coaching Mixtape
Avatar for mlcsv mlcsv
0
7
Code Reviewing Like a Champion
Avatar for maltzj maltzj
527
40k

Transcript

  1. Cecy Correa // UC Berkeley MICS 2021 LINKEDIN 2012 DATA

    BREACH CASE STUDY

  2. 1. The Hack How it happened Tracing & attribution 2.

    Impact LinkedIn class action suit United States v. Nikulin 3. Current day Agenda

  3. Using LinkedIn to Hack LinkedIn A little social engineering

  4. 4

  5. 5 (dramatic re-enactment of hacking into a server)

  6. 3 months later... Hack is uncovered on a message forum

  7. 7

  8. Food for Thought A look back at Conficker

  9. Hackers always leave a trace Tracing & Attribution

  10. None

  11. Assessing impact Legal repercussions

  12. 6.5 million accounts

  13. 100+ million accounts

  14. LinkedIn Class Action Lawsuit Lawsuit cites LinkedIn’s inability to: •

    Use strong encryption • Salt their passwords LinkedIn settles for over 1 million USD

  15. 1. Secure configuration of hardware and software 2. Controlled use

    of admin privileges Mitigation & CIS Controls

  16. 1. Secure configuration of hardware and software 2. Controlled use

    of admin privileges Mitigation & CIS Controls

  17. 17

  18. Food for Thought What do you think of the verdict?

  19. Current day Where are they now?

  20. 20

  21. 21

  22. 22

  23. Food for Thought Hack or no hack?

  24. Read more at: cecy.dev Thank you!