Upgrade to Pro — share decks privately, control downloads, hide ads and more …

LinkedIn Data Breach 2012 Case Study

Avatar for Cecy C. Cecy C.
November 30, 2021
Technology
0
5.1k

LinkedIn Data Breach 2012 Case Study

Case Study presented for Beyond the Code: Cybersecurity in Context, UC Berkeley, MICS Fall 2021
Avatar for Cecy C.

Cecy C.

November 30, 2021
Tweet

More Decks by Cecy C.

See All by Cecy C.
Surviving Code Reviews & Tech Interviews
Avatar for Cecy C. cecyc
0
94
Vulnerability True: Surviving Brutal Code Reviews and Tech Interviews
Avatar for Cecy C. cecyc
0
160
The Joy of CSS: RailsConf 2019
Avatar for Cecy C. cecyc
0
170
RubyConf 2018 Psychology of Fake News
Avatar for Cecy C. cecyc
0
86
A Retro of Retros: How Sprint Retrospectives Can Be Both Fun and Productive
Avatar for Cecy C. cecyc
0
150
MONKTOBERFEST 2018: Psychology of Fake News
Avatar for Cecy C. cecyc
0
97
From Monolith to Microservice: Building APIs with gRPC & golang
Avatar for Cecy C. cecyc
3
1.8k
Building APIs with GRPC, PHP, and Golang
Avatar for Cecy C. cecyc
1
570
The Psychology of Fake News (And What Tech Can Do About It)
Avatar for Cecy C. cecyc
1
61

Other Decks in Technology

See All in Technology
関数型プログラミングで 「脳がバグる」を乗り越える
Avatar for manabeai manabeai
2
220
AIの全社活用を推進するための安全なレールを敷いた話
Avatar for ShoheiMitani shoheimitani
2
640
〜『世界中の家族のこころのインフラ』を目指して”次の10年”へ〜 SREが導いたグローバルサービスの信頼性向上戦略とその舞台裏 / Towards the Next Decade: Enhancing Global Service Reliability
Avatar for kohbis kohbis
3
1.1k
LLM時代の検索
Avatar for shibuiwilliam shibuiwilliam
2
650
ソフトウェアQAがハードウェアの人になったの
Avatar for Matsu mineo_matsuya
3
140
クラウド開発の舞台裏とSRE文化の醸成 / SRE NEXT 2025 Lunch Session
Avatar for kazeburo kazeburo
1
460
QuickSight SPICE の効果的な運用戦略～S3 + Athena 構成での実践ノウハウ～/quicksight-spice-s3-athena-best-practices
Avatar for emi emiki
0
260
ゼロからはじめる採用広報
Avatar for Yuta Horii yutadayo
4
1k
Getting to Know Your Legacy (System) with AI-Driven Software Archeology (WeAreDevelopers World Congress 2025)
Avatar for Markus Harrer feststelltaste
1
180
話題の MCP と巡る OCI RAG ソリューションの旅 - Select AI with RAG と Generative AI Agents ディープダイブ
Avatar for oracle4engineer oracle4engineer
PRO
5
110
第64回コンピュータビジョン勉強会「The PanAf-FGBG Dataset: Understanding the Impact of Backgrounds in Wildlife Behaviour Recognition」
Avatar for Tatsuya Suzuki x_ttyszk
0
190
TLSから見るSREの未来
Avatar for atpons atpons
2
250

Featured

See All Featured
Testing 201, or: Great Expectations
Avatar for Joseph Mastey jmmastey
43
7.6k
The Art of Delivering Value - GDevCon NA Keynote
Avatar for David Neal reverentgeek
15
1.6k
The Art of Programming - Codeland 2020
Avatar for Erika Heidi erikaheidi
54
13k
Designing Dashboards & Data Visualisations in Web Apps
Avatar for Des Traynor destraynor
231
53k
Making Projects Easy
Avatar for Brett Harned brettharned
116
6.3k
The Pragmatic Product Professional
Avatar for Laura Van Doore lauravandoore
35
6.7k
Why Our Code Smells
Avatar for Brandon Keepers bkeepers
PRO
336
57k
Documentation Writing (for coders)
Avatar for Carmen Chung carmenintech
72
4.9k
Building Adaptive Systems
Avatar for Chris Keathley keathley
43
2.7k
Navigating Team Friction
Avatar for Lara Hogan lara
187
15k
Mobile First: as difficult as doing things right
Avatar for Swwweet swwweet
223
9.7k
Imperfection Machines: The Place of Print at Facebook
Avatar for Scott Boms scottboms
267
13k

Transcript

  1. Cecy Correa // UC Berkeley MICS 2021 LINKEDIN 2012 DATA

    BREACH CASE STUDY

  2. 1. The Hack How it happened Tracing & attribution 2.

    Impact LinkedIn class action suit United States v. Nikulin 3. Current day Agenda

  3. Using LinkedIn to Hack LinkedIn A little social engineering

  4. 4

  5. 5 (dramatic re-enactment of hacking into a server)

  6. 3 months later... Hack is uncovered on a message forum

  7. 7

  8. Food for Thought A look back at Conficker

  9. Hackers always leave a trace Tracing & Attribution

  10. None

  11. Assessing impact Legal repercussions

  12. 6.5 million accounts

  13. 100+ million accounts

  14. LinkedIn Class Action Lawsuit Lawsuit cites LinkedIn’s inability to: •

    Use strong encryption • Salt their passwords LinkedIn settles for over 1 million USD

  15. 1. Secure configuration of hardware and software 2. Controlled use

    of admin privileges Mitigation & CIS Controls

  16. 1. Secure configuration of hardware and software 2. Controlled use

    of admin privileges Mitigation & CIS Controls

  17. 17

  18. Food for Thought What do you think of the verdict?

  19. Current day Where are they now?

  20. 20

  21. 21

  22. 22

  23. Food for Thought Hack or no hack?

  24. Read more at: cecy.dev Thank you!