Upgrade to Pro — share decks privately, control downloads, hide ads and more …
Sign up for free

Security First

Sponsored · Your Podcast. Everywhere. Effortlessly. Share. Educate. Inspire. Entertain. You do you. We'll handle the rest. →
Avatar for Adam Baldwin Adam Baldwin
September 15, 2013
Technology
76
0

Security First

JSConfEU 2013

Avatar for Adam Baldwin

Adam Baldwin

September 15, 2013

Other Decks in Technology

See All in Technology
ソフトウェア ファクトリー - 再現性のあるソフトウェアの工場づくり / Software factory
Avatar for Takahiro Ikeuchi iktakahiro
6
4.9k
宣言型部分更新は何を解決しどこへ向かうのか
Avatar for did0es shuta13
1
450
Rustuna: Rustによる高速なOptuna実装
Avatar for Preferred Networks pfn
PRO
0
190
Railsで挑む大量データ永続化 〜600億件を永続化するための設計とボトルネックとの戦い〜
Avatar for Shoichi Ochi occhi
1
580
Tofu-Controller lightning talk @ Containerday 2026
Avatar for Giovanni Toraldo gionn
0
100
Refining Active Record
Avatar for Shugo Maeda shugo
0
150
10年後、Engineering 行為を剥奪されるとして、わたしたちは、どう、何を創ればいいだろうか。 / If Engineering Is Taken Away in 10 Years, How and What Should We Create?
Avatar for 株式会社ビットキー / Bitkey Inc. bitkey
PRO
1
190
無理せず続ける、子育てエンジニアの学び
Avatar for コドモン開発チーム codmoninc
PRO
0
860
アウトプット初心者、半年間のふりかえり
Avatar for aoi 4o1sobblue
0
430
PagerDuty Tech Hub-鳴らすけれど、人は動かない
Avatar for shinji ezaki ezaki
0
170
Persisting Massive Data with Rails ~Designing for 60 billion rows, and fighting the bottlenecks~ Railsで挑む大量データ永続化 〜600億件を永続化するための設計とボトルネックとの戦い〜
Avatar for Shoichi Ochi occhi
0
730
AI コーディングと人間の認知スループット / CTO Night & Day 2026 Morning Session / AI Coding and Human Cognitive Throughput
Avatar for Tamirlan 893 Torgayev prog893
4
1k

Featured

See All Featured
Evolving SEO for Evolving Search Engines
Avatar for Ryan Jones ryanjones
0
330
Connecting the Dots Between Site Speed, User Experience & Your Business [WebExpo 2025]
Avatar for Tammy Everts tammyeverts
11
1.1k
VelocityConf: Rendering Performance Case Studies
Avatar for Addy Osmani addyosmani
331
25k
Learning to Love Humans: Emotional Interface Design
Avatar for Aarron Walter aarron
275
41k
Digital Ethics as a Driver of Design Innovation
Avatar for Per Axbom axbom
PRO
1
460
Measuring & Analyzing Core Web Vitals
Avatar for Philip Tellis bluesmoon
9
1k
The Power of CSS Pseudo Elements
Avatar for Geoffrey Crofte geoffreycrofte
82
6.6k
JAMstack: Web Apps at Ludicrous Speed - All Things Open 2022
Avatar for David Neal reverentgeek
1
640
[SF Ruby Conf 2025] Rails X
Avatar for Vladimir Dementyev palkan
3
1.5k
Deep Space Network (abreviated)
Avatar for Tony Rice tonyrice
0
370
HTML-Aware ERB: The Path to Reactive Rendering @ RubyCon 2026, Rimini, Italy
Avatar for Marco Roth marcoroth
5
820
How to optimise 3,500 product descriptions for ecommerce in one day using ChatGPT
Avatar for Katarina Dahlin katarinadahlin
PRO
3
3.9k

Transcript

  1. Security First

  2. None
  3. None

  4. Thanks First

  5. Hi, I’m Adam

  6. Hi, I’m Adam @adam_baldwin @liftsecurity @nodesecurity

  7. Hi, I’m Adam @evilpacket

  8. None

  9. andbang.com

  10. andbang.com

  11. None
  12. None

  13. Node Security Project nodesecurity.io

  14. Security First

  15. We’re Fucked

  16. Nothing is 100% Secure.

  17. None
  18. None

  19. Defender Attacker

  20. Defender Attacker

  21. None

  22. Attacker Defender

  23. Software is Hard

  24. Software is full of opinions

  25. None

  26. Mobile First

  27. Mobile First Content First

  28. Mobile First Content First Offline First

  29. Mobile First Content First Offline First SECURITY

  30. Software is full of constraints

  31. Security is one of those

  32. Who’s responsible for security?

  33. Who’s responsible for security? You are.

  34. Why?

  35. None

  36. NSA Spent $25 million on ‘software vulnerabilities’ in 2013

  37. Stay off the menu.

  38. Litigation is coming.

  39. Litigation is coming.

  40. Enough Doom & Gloom already!

  41. Enough Doom & Gloom already!

  42. Something has to change

  43. Let’s build a Security First culture

  44. None

  45. Why do we avoid security?

  46. - Ignorance - Procrastination - Not Exciting work - Not

    Rewarded

  47. Education Understand Vulnerabilities

  48. The simple stuff still works.

  49. None

  50. Validation / Sanitization Crypto http://www.matasano.com/articles/crypto-challenges/ http://owasp.org

  51. npm install all the things™

  52. npm install coffeescript

  53. so..ahhh. what else?

  54. Process It’s not immutable

  55. Community Bridge all the worlds http://blog.andyet.com/2013/09/11/shame-and-security

  56. security.md

  57. Homework. - Learn about 1 vuln - Audit some code

    - Teach a Friend

  58. confwork? Talk to each other about security...

  59. </PRESENTATION> @adam_baldwin | @LiftSecurity