Andrew Yates' Slides at NSSpain 2014

Transcript

2. What to do when you get hacked? @ay8s
5. What happened?
6. “Very happy I lost tons of weight easily with this special fruit.. “I lost 8 pounds this past week! All thanks to this new secret” “I lost 8 pounds this past week! All thanks to this new secret” “Very happy I lost tons of weight easily with this special fruit..
9. So what to do…
10. Communicate
13. Make sure your customers know where to turn when something goes wrong.
16. Act
17. Reset Keys, Secrets etc.
18. Encrypt
19. Expedited Review
20. Expedited Review
21. Utilise Help
22. Investigate
23. Check GitHub Sessions
25. 30,000 Facebook Accounts Affected.
27. Act, again…
28. If you can, don’t include keys, secrets
29. OAuth / Native Auth
30. Two Factor “ALL the things”
31. Security Audits
32. Rewards
33. Lastly…
34. Don’t Panic
37. Signups Metrics
40. Some more reading…
41. ✉ andy@bufferapp.com @ay8s