Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Andrew Yates' Slides at NSSpain 2014

Avatar for Luis Ascorbe Luis Ascorbe
September 18, 2014
Programming
0
110

Andrew Yates' Slides at NSSpain 2014

Avatar for Luis Ascorbe

Luis Ascorbe

September 18, 2014
Tweet

More Decks by Luis Ascorbe

See All by Luis Ascorbe
Snapshot Testing at CMD+U Conf
Avatar for Luis Ascorbe lascorbe
2
140
Dave Verwer's Slides at NSSpain 2014
Avatar for Luis Ascorbe lascorbe
0
120
Alberto Lopez's Slides at NSSpain 2014
Avatar for Luis Ascorbe lascorbe
0
39
Erik Erice's Slides at NSSpain 2014
Avatar for Luis Ascorbe lascorbe
0
96
Krzysztof Zabłocki's Slides at NSSpain 2013
Avatar for Luis Ascorbe lascorbe
8
440
Luis Solano's Slides at NSSpain 2013
Avatar for Luis Ascorbe lascorbe
3
120
Daniel Eggert's Slides at NSSpain 2013
Avatar for Luis Ascorbe lascorbe
8
210
Nacho Soto's Slides at NSSpain 2013
Avatar for Luis Ascorbe lascorbe
4
130

Other Decks in Programming

See All in Programming
AWS re:Invent 2025参加 直前 Seattle-Tacoma Airport(SEA)におけるハードウェア紛失インシデントLT
Avatar for tetutetu214 tetutetu214
2
120
AtCoder Conference 2025
Avatar for shindannin shindannin
0
1.1k
AIによるイベントストーミング図からのコード生成 / AI-powered code generation from Event Storming diagrams
Avatar for nrs nrslib
2
1.9k
Vibe Coding - AI 驅動的軟體開發
Avatar for Micky Li mickyp100
0
180
AI Agent の開発と運用を支える Durable Execution #AgentsInProd
Avatar for izumin5210 izumin5210
7
2.3k
AIによる高速開発をどう制御するか？ ガードレール設置で開発速度と品質を両立させたチームの事例
Avatar for tonkotsuboy_com tonkotsuboy_com
7
2.4k
AI によるインシデント初動調査の自動化を行う AI インシデントコマンダーを作った話
Avatar for azukiazusa azukiazusa1
1
750
Package Management Learnings from Homebrew
Avatar for Mike McQuaid mikemcquaid
0
230
それ、本当に安全？ ファイルアップロードで見落としがちなセキュリティリスクと対策
Avatar for ikechi penpeen
7
4k
dchart: charts from deck markup
Avatar for Anthony Starks ajstarks
3
1k
MUSUBIXとは
Avatar for Hisaho nahisaho
0
140
humanlayerのブログから学ぶ、良いCLAUDE.mdの書き方
Avatar for Yuto tsukamoto1783
0
200

Featured

See All Featured
Getting science done with accelerated Python computing platforms
Avatar for Jacob Tomlinson jacobtomlinson
2
120
Building the Perfect Custom Keyboard
Avatar for Naoto Takai takai
2
690
What's in a price? How to price your products and services
Avatar for Michael Herold michaelherold
247
13k
What does AI have to do with Human Rights?
Avatar for Per Axbom axbom
PRO
0
2k
[Rails World 2023 - Day 1 Closing Keynote] - The Magic of Rails
Avatar for Eileen M. Uchitelle eileencodes
38
2.7k
Navigating Weather and Climate Data
Avatar for Ryan Abernathey rabernat
0
110
Game over? The fight for quality and originality in the time of robots
Avatar for Wayne Barker wayneb77
1
120
Leveraging LLMs for student feedback in introductory data science courses - posit::conf(2025)
Avatar for Mine Cetinkaya-Rundel minecr
0
160
KATA
Avatar for Megan Lloyd mclloyd
PRO
34
15k
The World Runs on Bad Software
Avatar for Brandon Keepers bkeepers
PRO
72
12k
The Psychology of Web Performance [Beyond Tellerrand 2023]
Avatar for Tammy Everts tammyeverts
49
3.3k
Product Roadmaps are Hard
Avatar for C. Todd Lombardo iamctodd
PRO
55
12k

Transcript

  1. None

  2. What to do when you get hacked? @ay8s

  3. None
  4. None

  5. What happened?

  6. “Very happy I lost tons of weight easily with this

    special fruit.. “I lost 8 pounds this past week! All thanks to this new secret” “I lost 8 pounds this past week! All thanks to this new secret” “Very happy I lost tons of weight easily with this special fruit..
  7. None
  8. None

  9. So what to do…

  10. Communicate

  11. None
  12. None

  13. Make sure your customers know where to turn when something

    goes wrong.
  14. None
  15. None

  16. Act

  17. Reset Keys, Secrets etc.

  18. Encrypt

  19. Expedited Review

  20. Expedited Review

  21. Utilise Help

  22. Investigate

  23. Check GitHub Sessions

  24. None

  25. 30,000 Facebook Accounts Affected.

  26. None

  27. Act, again…

  28. If you can, don’t include keys, secrets

  29. OAuth / Native Auth

  30. Two Factor “ALL the things”

  31. Security Audits

  32. Rewards

  33. Lastly…

  34. Don’t Panic

  35. None
  36. None

  37. Signups Metrics

  38. None
  39. None

  40. Some more reading…

  41. ✉ andy@bufferapp.com @ay8s