Upgrade to Pro — share decks privately, control downloads, hide ads and more …

LinkedIn Data Breach 2012 Case Study

Avatar for Cecy C. Cecy C.
November 30, 2021
Technology
0
5.2k

LinkedIn Data Breach 2012 Case Study

Case Study presented for Beyond the Code: Cybersecurity in Context, UC Berkeley, MICS Fall 2021

Avatar for Cecy C.

Cecy C.

November 30, 2021
Tweet

More Decks by Cecy C.

See All by Cecy C.
Surviving Code Reviews & Tech Interviews
Avatar for Cecy C. cecyc
0
100
Vulnerability True: Surviving Brutal Code Reviews and Tech Interviews
Avatar for Cecy C. cecyc
0
170
The Joy of CSS: RailsConf 2019
Avatar for Cecy C. cecyc
0
180
RubyConf 2018 Psychology of Fake News
Avatar for Cecy C. cecyc
0
94
A Retro of Retros: How Sprint Retrospectives Can Be Both Fun and Productive
Avatar for Cecy C. cecyc
0
180
MONKTOBERFEST 2018: Psychology of Fake News
Avatar for Cecy C. cecyc
0
120
From Monolith to Microservice: Building APIs with gRPC & golang
Avatar for Cecy C. cecyc
3
1.9k
Building APIs with GRPC, PHP, and Golang
Avatar for Cecy C. cecyc
1
600
The Psychology of Fake News (And What Tech Can Do About It)
Avatar for Cecy C. cecyc
1
67

Other Decks in Technology

See All in Technology
OCI技術資料 : 証明書サービス概要
Avatar for Oracle Cloud Infrastructure ソリューション・エンジニア ocise
1
7.1k
SaaSに宿る21g
Avatar for Yamakan kanyamaguc
2
180
AWS Systems Managerのハイブリッドアクティベーションを使用したガバメントクラウド環境の統合管理
Avatar for Toru_Kubota toru_kubota
1
180
Bill One 開発エンジニア 紹介資料
Avatar for Sansan, Inc. sansan33
PRO
5
18k
GitHub Copilot CLI で Azure Portal to Bicep
Avatar for Yuta Matsumura tsubakimoto_s
0
280
Astro Islandsの 内部実装を 「日本で一番わかりやすく」 ざっくり解説！
Avatar for Wu Kenji knj
0
300
Sansanの認証基盤を支えるアーキテクチャとその振り返り
Avatar for SansanTech sansantech
PRO
1
110
CloudFrontのHost Header転送設定でパケットの中身はどう変わるのか？
Avatar for nagisa_53 nagisa53
1
220
Datadog で実現するセキュリティ対策 ~オブザーバビリティとセキュリティを 一緒にやると何がいいのか~
Avatar for Shuntaro Azuma a2ush
0
170
PostgreSQL 18のNOT ENFORCEDな制約とDEFERRABLEの関係
Avatar for Yasuo Honda yahonda
0
140
Physical AI on AWS リファレンスアーキテクチャ / Physical AI on AWS Reference Architecture
Avatar for shota aws_shota
1
170
Bref でサービスを運用している話
Avatar for Sugar Sato sgash708
0
200

Featured

See All Featured
Taking LLMs out of the black box: A practical guide to human-in-the-loop distillation
Avatar for Ines Montani inesmontani
PRO
3
2.1k
Ethics towards AI in product and experience design
Avatar for Skipper Chong Warson skipperchong
2
240
Ten Tips & Tricks for a 🌱 transition
Avatar for Manu Carrasco Molina stuffmc
0
91
The Web Performance Landscape in 2024 [PerfNow 2024]
Avatar for Tammy Everts tammyeverts
12
1.1k
Evolving SEO for Evolving Search Engines
Avatar for Ryan Jones ryanjones
0
170
Claude Code のすすめ
Avatar for schroneko schroneko
67
220k
GraphQLとの向き合い方2022年版
Avatar for Yosuke Kurami quramy
50
14k
Groundhog Day: Seeking Process in Gaming for Health
Avatar for Sebastian Deterding codingconduct
0
130
How To Speak Unicorn (iThemes Webinar)
Avatar for Michelle Schulp Hunt marktimemedia
1
420
How to Create Impact in a Changing Tech Landscape [PerfNow 2023]
Avatar for Tammy Everts tammyeverts
55
3.3k
The Limits of Empathy - UXLibs8
Avatar for Cassini Nazir cassininazir
1
270
Building Adaptive Systems
Avatar for Chris Keathley keathley
44
3k

Transcript

  1. Cecy Correa // UC Berkeley MICS 2021 LINKEDIN 2012 DATA

    BREACH CASE STUDY

  2. 1. The Hack How it happened Tracing & attribution 2.

    Impact LinkedIn class action suit United States v. Nikulin 3. Current day Agenda

  3. Using LinkedIn to Hack LinkedIn A little social engineering

  4. 4

  5. 5 (dramatic re-enactment of hacking into a server)

  6. 3 months later... Hack is uncovered on a message forum

  7. 7

  8. Food for Thought A look back at Conficker

  9. Hackers always leave a trace Tracing & Attribution

  10. None

  11. Assessing impact Legal repercussions

  12. 6.5 million accounts

  13. 100+ million accounts

  14. LinkedIn Class Action Lawsuit Lawsuit cites LinkedIn’s inability to: •

    Use strong encryption • Salt their passwords LinkedIn settles for over 1 million USD

  15. 1. Secure configuration of hardware and software 2. Controlled use

    of admin privileges Mitigation & CIS Controls

  16. 1. Secure configuration of hardware and software 2. Controlled use

    of admin privileges Mitigation & CIS Controls

  17. 17

  18. Food for Thought What do you think of the verdict?

  19. Current day Where are they now?

  20. 20

  21. 21

  22. 22

  23. Food for Thought Hack or no hack?

  24. Read more at: cecy.dev Thank you!