Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Andrew Yates' Slides at NSSpain 2014

Avatar for Luis Ascorbe Luis Ascorbe
September 18, 2014
Programming
0
110

Andrew Yates' Slides at NSSpain 2014

Avatar for Luis Ascorbe

Luis Ascorbe

September 18, 2014
Tweet

More Decks by Luis Ascorbe

See All by Luis Ascorbe
Snapshot Testing at CMD+U Conf
Avatar for Luis Ascorbe lascorbe
2
130
Dave Verwer's Slides at NSSpain 2014
Avatar for Luis Ascorbe lascorbe
0
120
Alberto Lopez's Slides at NSSpain 2014
Avatar for Luis Ascorbe lascorbe
0
37
Erik Erice's Slides at NSSpain 2014
Avatar for Luis Ascorbe lascorbe
0
93
Krzysztof Zabłocki's Slides at NSSpain 2013
Avatar for Luis Ascorbe lascorbe
8
440
Luis Solano's Slides at NSSpain 2013
Avatar for Luis Ascorbe lascorbe
3
120
Daniel Eggert's Slides at NSSpain 2013
Avatar for Luis Ascorbe lascorbe
8
200
Nacho Soto's Slides at NSSpain 2013
Avatar for Luis Ascorbe lascorbe
4
130

Other Decks in Programming

See All in Programming
AI時代の『改訂新版 良いコード／悪いコードで学ぶ設計入門』 / ai-good-code-bad-code
Avatar for MinoDriven minodriven
24
10k
コーディングエージェント概観(2025/07)
Avatar for Itsuki itsuki_t88
0
460
Vibe coding コードレビュー
Avatar for kinopee kinopeee
0
340
SwiftでMCPサーバーを作ろう！
Avatar for giginet giginet
PRO
2
210
オンコール⼊⾨〜ページャーが鳴る前に、あなたが備えられること〜 / Before The Pager Rings
Avatar for Yuuki Takahashi yktakaha4
2
1.2k
AIコーディングエージェント全社導入とセキュリティ対策
Avatar for hikae hikaruegashira
15
8.7k
코딩 에이전트 체크리스트: Claude Code ver.
Avatar for nacyot nacyot
0
1k
PHPUnitの限界をPlaywrightで補完するテストアプローチ
Avatar for yuzneri yuzneri
0
350
顧客の画像データをテラバイト単位で配信する 画像サーバを WebP にした際に起こった課題と その対応策 ～継続的な取り組みを添えて～
Avatar for Takuya TAKAHASHI takutakahashi
4
1.4k
DMMを支える決済基盤の技術的負債にどう立ち向かうか / Addressing Technical Debt in Payment Infrastructure
Avatar for yoshiyoshifujii yoshiyoshifujii
4
670
AIに安心して任せるためにTypeScriptで一意な型を作ろう
Avatar for Yuki Yata arfes0e2b3c
0
280
The Evolution of Enterprise Java with Jakarta EE 11 and Beyond
Avatar for ivargrimstad ivargrimstad
0
590

Featured

See All Featured
Writing Fast Ruby
Avatar for Erik Berlin sferik
628
62k
Thoughts on Productivity
Avatar for Jon Yablonski jonyablonski
69
4.8k
個人開発の失敗を避けるイケてる考え方 / tips for indie hackers
Avatar for panda_program panda_program
110
19k
Save Time (by Creating Custom Rails Generators)
Avatar for Garrett Dimon garrettdimon
PRO
31
1.3k
The Myth of the Modular Monolith - Day 2 Keynote - Rails World 2024
Avatar for Eileen M. Uchitelle eileencodes
26
2.9k
Put a Button on it: Removing Barriers to Going Fast.
Avatar for kastner kastner
60
3.9k
CoffeeScript is Beautiful & I Never Want to Write Plain JavaScript Again
Avatar for Sam Stephenson sstephenson
161
15k
Distributed Sagas: A Protocol for Coordinating Microservices
Avatar for Caitie McCaffrey caitiem20
331
22k
Visualizing Your Data: Incorporating Mongo into Loggly Infrastructure
Avatar for mongodb mongodb
47
9.6k
The Cult of Friendly URLs
Avatar for Andy Hume andyhume
79
6.5k
No one is an island. Learnings from fostering a developers community.
Avatar for Antonio thoeni
21
3.4k
ReactJS: Keep Simple. Everything can be a component!
Avatar for Pedro Nauck pedronauck
667
120k

Transcript

  1. None

  2. What to do when you get hacked? @ay8s

  3. None
  4. None

  5. What happened?

  6. “Very happy I lost tons of weight easily with this

    special fruit.. “I lost 8 pounds this past week! All thanks to this new secret” “I lost 8 pounds this past week! All thanks to this new secret” “Very happy I lost tons of weight easily with this special fruit..
  7. None
  8. None

  9. So what to do…

  10. Communicate

  11. None
  12. None

  13. Make sure your customers know where to turn when something

    goes wrong.
  14. None
  15. None

  16. Act

  17. Reset Keys, Secrets etc.

  18. Encrypt

  19. Expedited Review

  20. Expedited Review

  21. Utilise Help

  22. Investigate

  23. Check GitHub Sessions

  24. None

  25. 30,000 Facebook Accounts Affected.

  26. None

  27. Act, again…

  28. If you can, don’t include keys, secrets

  29. OAuth / Native Auth

  30. Two Factor “ALL the things”

  31. Security Audits

  32. Rewards

  33. Lastly…

  34. Don’t Panic

  35. None
  36. None

  37. Signups Metrics

  38. None
  39. None

  40. Some more reading…

  41. ✉ andy@bufferapp.com @ay8s