Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Andrew Yates' Slides at NSSpain 2014

Sponsored · Your Podcast. Everywhere. Effortlessly. Share. Educate. Inspire. Entertain. You do you. We'll handle the rest. →
Avatar for Luis Ascorbe Luis Ascorbe
September 18, 2014
Programming
120
0

Andrew Yates' Slides at NSSpain 2014

Avatar for Luis Ascorbe

Luis Ascorbe

September 18, 2014

More Decks by Luis Ascorbe

See All by Luis Ascorbe
Snapshot Testing at CMD+U Conf
Avatar for Luis Ascorbe lascorbe
2
160
Dave Verwer's Slides at NSSpain 2014
Avatar for Luis Ascorbe lascorbe
0
130
Alberto Lopez's Slides at NSSpain 2014
Avatar for Luis Ascorbe lascorbe
0
46
Erik Erice's Slides at NSSpain 2014
Avatar for Luis Ascorbe lascorbe
0
100
Krzysztof Zabłocki's Slides at NSSpain 2013
Avatar for Luis Ascorbe lascorbe
8
460
Luis Solano's Slides at NSSpain 2013
Avatar for Luis Ascorbe lascorbe
3
150
Daniel Eggert's Slides at NSSpain 2013
Avatar for Luis Ascorbe lascorbe
8
220
Nacho Soto's Slides at NSSpain 2013
Avatar for Luis Ascorbe lascorbe
4
140

Other Decks in Programming

See All in Programming
初めてのKubernetes 本番運用でハマった話
Avatar for Kobujee_53 oku053
0
120
The Bowling Game - From Imperative to Functional Programming - Part 1
Avatar for Philip Schwarz philipschwarz
PRO
0
310
アルゴリズムは何を圧縮しているのか ─ Haskell から育った「圧縮代数」というメンタルモデル
Avatar for Naoya Ito naoya
16
3.3k
1年で人数1.5倍、PR数5.5倍増。 品質とアウトカムはどうなったか、 何が効いたか
Avatar for ike ike002jp
0
120
Honoでのサプライチェーン侵害対策 〜 3つのライブラリに学ぶ
Avatar for Yusuke Wada yusukebe
7
1.8k
Prismを使った型安全な暗号化_関数型まつり2026
Avatar for _fhhmm _fhhmm
0
110
AI時代の仕事技芸論〜ソフトウェア開発で「遊ぶように働く」職人的熟達のすすめ（スクフェス仙台 2026バージョン）
Avatar for Yoshihito Kuranuki / 倉貫義人 kuranuki
0
620
The Past, Present, and Future of Enterprise Java
Avatar for ivargrimstad ivargrimstad
0
100
【やさしく解説 設計編 #0】DDDのコード、読めるのに分からない人へ
Avatar for HideyukiKitao panda728
PRO
2
260
symfony/aiとlaravel/boost
Avatar for Hiromi Hishida 77web
0
120
『コードを書く以外の』エンジニアリング〜課金基盤移行プロジェクト推進のためのTips4選
Avatar for yuriko yuriko1211
0
400
任せる範囲はこう広がった / How the Scope of AI Delegation Has Expanded
Avatar for nrs nrslib
1
250

Featured

See All Featured
A Guide to Academic Writing Using Generative AI - A Workshop
Avatar for Kenji Saito ks91
PRO
1
350
Navigating Team Friction
Avatar for Lara Hogan lara
192
16k
Art, The Web, and Tiny UX
Avatar for Lynn Fisher lynnandtonic
304
22k
How to make the Groovebox
Avatar for あそなす asonas
2
2.3k
Highjacked: Video Game Concept Design
Avatar for Ryan Kendrick rkendrick25
PRO
1
410
How to Build an AI Search Optimization Roadmap - Criteria and Steps to Take #SEOIRL
Avatar for Aleyda Solis aleyda
1
2.1k
Self-Hosted WebAssembly Runtime for Runtime-Neutral Checkpoint/Restore in Edge–Cloud Continuum
Avatar for Yuki Nakata chikuwait chikuwait
0
650
Leadership Guide Workshop - DevTernity 2021
Avatar for David Neal reverentgeek
1
320
JAMstack: Web Apps at Ludicrous Speed - All Things Open 2022
Avatar for David Neal reverentgeek
1
490
Fight the Zombie Pattern Library - RWD Summit 2016
Avatar for Marcelo Somers marcelosomers
234
17k
Helping Users Find Their Own Way: Creating Modern Search Experiences
Avatar for Dan Newman danielanewman
31
3.2k
Information Architects: The Missing Link in Design Systems
Avatar for Michelle Chin soysaucechin
0
1k

Transcript

  1. None

  2. What to do when you get hacked? @ay8s

  3. None
  4. None

  5. What happened?

  6. “Very happy I lost tons of weight easily with this

    special fruit.. “I lost 8 pounds this past week! All thanks to this new secret” “I lost 8 pounds this past week! All thanks to this new secret” “Very happy I lost tons of weight easily with this special fruit..
  7. None
  8. None

  9. So what to do…

  10. Communicate

  11. None
  12. None

  13. Make sure your customers know where to turn when something

    goes wrong.
  14. None
  15. None

  16. Act

  17. Reset Keys, Secrets etc.

  18. Encrypt

  19. Expedited Review

  20. Expedited Review

  21. Utilise Help

  22. Investigate

  23. Check GitHub Sessions

  24. None

  25. 30,000 Facebook Accounts Affected.

  26. None

  27. Act, again…

  28. If you can, don’t include keys, secrets

  29. OAuth / Native Auth

  30. Two Factor “ALL the things”

  31. Security Audits

  32. Rewards

  33. Lastly…

  34. Don’t Panic

  35. None
  36. None

  37. Signups Metrics

  38. None
  39. None

  40. Some more reading…

  41. ✉ andy@bufferapp.com @ay8s