Upgrade to Pro — share decks privately, control downloads, hide ads and more …

LinkedIn Data Breach 2012 Case Study

045d790f605ea8d482380c5075d802d5?s=47 Cecy C.
November 30, 2021
Technology
0
930

LinkedIn Data Breach 2012 Case Study

Case Study presented for Beyond the Code: Cybersecurity in Context, UC Berkeley, MICS Fall 2021

045d790f605ea8d482380c5075d802d5?s=128

Cecy C.

November 30, 2021
Tweet

More Decks by Cecy C.

See All by Cecy C.
Surviving Code Reviews & Tech Interviews
045d790f605ea8d482380c5075d802d5?s=48 cecyc
0
66
Vulnerability True: Surviving Brutal Code Reviews and Tech Interviews
045d790f605ea8d482380c5075d802d5?s=48 cecyc
0
120
The Joy of CSS: RailsConf 2019
045d790f605ea8d482380c5075d802d5?s=48 cecyc
0
110
RubyConf 2018 Psychology of Fake News
045d790f605ea8d482380c5075d802d5?s=48 cecyc
0
71
A Retro of Retros: How Sprint Retrospectives Can Be Both Fun and Productive
045d790f605ea8d482380c5075d802d5?s=48 cecyc
0
58
MONKTOBERFEST 2018: Psychology of Fake News
045d790f605ea8d482380c5075d802d5?s=48 cecyc
0
41
From Monolith to Microservice: Building APIs with gRPC & golang
045d790f605ea8d482380c5075d802d5?s=48 cecyc
3
1.4k
Building APIs with GRPC, PHP, and Golang
045d790f605ea8d482380c5075d802d5?s=48 cecyc
1
390
The Psychology of Fake News (And What Tech Can Do About It)
045d790f605ea8d482380c5075d802d5?s=48 cecyc
1
37

Other Decks in Technology

See All in Technology
Trusted Web プロトタイプ
525442fc70ca92f82ae503f826956137?s=48 finengine
0
330
ふりかえりの技術 / retrospectives
88f4e84b94fe07cddbd9e6479d689192?s=48 soudai
3
170
DevelopersIO 2022 俺のTerraform Pipeline
08dd0b93e011904f40d60d5a1b54c671?s=48 takakuni
0
440
SPAとWebアプリケーションでCognitoの使い方はどう変わるのか？ / How do we use cognito with SPA and web applications?
7d75345644fa75da12a5e5215ac2352a?s=48 kitano_yuichi
0
390
Djangoで組織とユーザーの権限管理をやってみよう #devio2022
Fe8025d56f2bf17204e3aa7598a96fe2?s=48 seiichi1101
0
390
データをコネコネ！メール配信用データ生成の仕組み
Cdb7fe48c050935995f8a6a58a5ceba9?s=48 kappezoro
0
120
金融スタートアップの上場準備で大事にしたマインドセット / 2022-08-04-the-mindset-in-preparing-for-ipo
0251532f4fb413ea1a026efe6eb16b87?s=48 stajima
0
320
DMMプラットフォーム ゼロから始めるKubernetes運用 課題と改善
F91225895fc7411d415604147af75cab?s=48 pospome
0
400
塩漬けにしているMySQL 8.0.xxをバージョンアップしたくなる、ここ数年でのMySQL 8.0の改善点 / MySQL Update 202208
7fb060398b26ed622d34921bd64e4f5d?s=48 yoshiakiyamasaki
1
680
GCCP Creator @ COSCUP 2022
2102a6b8760bd6f57f672805723dd83a?s=48 line_developers_tw
PRO
0
1.4k
テクニカルライティングの検定を受けてみた話 / "My Story About Taking the Technical Writing Exam
A3966f193f4bef226a0d3e3c1f728d7f?s=48 line_developers
PRO
1
210
金融領域のマルチプロダクトを効率よく開発・運用するためのシステム基盤と組織設計について / 2022-07-28-multi-product-platform
0251532f4fb413ea1a026efe6eb16b87?s=48 stajima
0
150

Featured

See All Featured
Designing on Purpose - Digital PM Summit 2013
7653c7c449918ff6542880a8c284f5e7?s=48 jponch
106
5.7k
The Pragmatic Product Professional
1177e050db6bafe62885362edf6e3537?s=48 lauravandoore
19
3.1k
Code Reviewing Like a Champion
C7393b7ba7ec9c8890dd77d209fbb3c9?s=48 maltzj
506
37k
Making the Leap to Tech Lead
32de0bd2ba869609d26fd052a4622778?s=48 cromwellryan
113
7.4k
Producing Creativity
Ae14cc4491ac334f9cd23f9f93b4305e?s=48 orderedlist
PRO
334
37k
Rails Girls Zürich Keynote
24fc194843a71f10949be18d5a692682?s=48 gr2m
87
12k
jQuery: Nuts, Bolts and Bling
9cde37f47e4a800ea081ea42de8d749a?s=48 dougneiner
56
6.4k
10 Git Anti Patterns You Should be Aware of
Dafc4723e9a1c067796c0fec6f509774?s=48 lemiorhan
638
52k
Designing for Performance
245cee81a9c424266e5e401d844ea881?s=48 lara
597
64k
Put a Button on it: Removing Barriers to Going Fast.
Bfd6b681ec6e8c9bef82ff0521c364f7?s=48 kastner
56
2.3k
JavaScript: Past, Present, and Future - NDC Porto 2020
3ab1249be442027903e1180025340b3f?s=48 reverentgeek
37
3.3k
How New CSS Is Changing Everything About Graphic Design on the Web
D83926c323d4f9289f947b4b4e76b939?s=48 jensimmons
213
11k

Transcript

  1. Cecy Correa // UC Berkeley MICS 2021 LINKEDIN 2012 DATA

    BREACH CASE STUDY

  2. 1. The Hack How it happened Tracing & attribution 2.

    Impact LinkedIn class action suit United States v. Nikulin 3. Current day Agenda

  3. Using LinkedIn to Hack LinkedIn A little social engineering

  4. 4

  5. 5 (dramatic re-enactment of hacking into a server)

  6. 3 months later... Hack is uncovered on a message forum

  7. 7

  8. Food for Thought A look back at Conficker

  9. Hackers always leave a trace Tracing & Attribution

  10. None

  11. Assessing impact Legal repercussions

  12. 6.5 million accounts

  13. 100+ million accounts

  14. LinkedIn Class Action Lawsuit Lawsuit cites LinkedIn’s inability to: •

    Use strong encryption • Salt their passwords LinkedIn settles for over 1 million USD

  15. 1. Secure configuration of hardware and software 2. Controlled use

    of admin privileges Mitigation & CIS Controls

  16. 1. Secure configuration of hardware and software 2. Controlled use

    of admin privileges Mitigation & CIS Controls

  17. 17

  18. Food for Thought What do you think of the verdict?

  19. Current day Where are they now?

  20. 20

  21. 21

  22. 22

  23. Food for Thought Hack or no hack?

  24. Read more at: cecy.dev Thank you!