Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Kelsey Gilmore-Innis - Seriously Strong Securit...

Avatar for PyCon 2016 PyCon 2016
June 01, 2016
Programming
6
930

Kelsey Gilmore-Innis - Seriously Strong Security on a Shoestring

Avatar for PyCon 2016

PyCon 2016

June 01, 2016
Tweet

More Decks by PyCon 2016

See All by PyCon 2016
Manuel Ebert - Putting 1 million new words into the dictionary
Avatar for PyCon 2016 pycon2016
6
920
Brett Slatkin - Refactoring Python: Why and how to restructure your code
Avatar for PyCon 2016 pycon2016
17
5.6k
Mike Graham - The Life Cycle of a Python Class
Avatar for PyCon 2016 pycon2016
7
8.8k
Nathaniel Manista, Augie Fackler - Code Unto Others
Avatar for PyCon 2016 pycon2016
0
510
Alex Gaynor - The cobbler's children have no shoes, or building better tools for ourselves
Avatar for PyCon 2016 pycon2016
0
770
Adrienne Lowe - Bake the Cookies, Wear the Dress: Connecting with Confident Authenticity
Avatar for PyCon 2016 pycon2016
0
350
Jake Vanderplas - Statistics for Hackers
Avatar for PyCon 2016 pycon2016
17
5k
Daniele Procida - Documentation-driven development - lessons from the Django Project
Avatar for PyCon 2016 pycon2016
3
860
Shannon Quinn - Python for Public Health: Building Statistical Models of Ciliary Motion
Avatar for PyCon 2016 pycon2016
0
540

Other Decks in Programming

See All in Programming
AIコーディングAgentとの向き合い方
Avatar for kmuto eycjur
0
280
Laravel Boost 超入門
Avatar for Arlo fire_arlo
3
220
知っているようで知らない"rails new"の世界 / The World of "rails new" You Think You Know but Don't
Avatar for luccafort luccafort
PRO
1
190
より安全で効率的な Go コードへ： Protocol Buffers Opaque API の導入
Avatar for shoyan shwatanap
2
730
FindyにおけるTakumi活用と脆弱性管理のこれから
Avatar for adachi.ryo rvirus0817
0
530
アセットのコンパイルについて
Avatar for ojun ojun9
0
130
Ruby Parser progress report 2025
Avatar for yui-knk yui_knk
1
460
「待たせ上手」なスケルトンスクリーン、 そのUXの裏側
Avatar for teamLab teamlab
PRO
0
560
go test -json そして testing.T.Attr / Kyoto.go #63
Avatar for utagawa kiki utgwkk
3
310
250830 IaCの選定~AWS SAMのLambdaをECSに乗り換えたときの備忘録~
Avatar for Takumi Abe east_takumi
0
400
実用的なGOCACHEPROG実装をするために / golang.tokyo #40
Avatar for mazrean mazrean
1
290
今だからこそ入門する Server-Sent Events (SSE)
Avatar for NearMeの技術発表資料です nearme_tech
PRO
3
250

Featured

See All Featured
Designing Experiences People Love
Avatar for Jonathan Moore moore
142
24k
The MySQL Ecosystem @ GitHub 2015
Avatar for Sam Lambert samlambert
251
13k
Responsive Adventures: Dirty Tricks From The Dark Corners of Front-End
Avatar for Vitaly Friedman smashingmag
252
21k
Build your cross-platform service in a week with App Engine
Avatar for Jose L jlugia
231
18k
Code Reviewing Like a Champion
Avatar for maltzj maltzj
525
40k
Making Projects Easy
Avatar for Brett Harned brettharned
117
6.4k
[RailsConf 2023 Opening Keynote] The Magic of Rails
Avatar for Eileen M. Uchitelle eileencodes
30
9.7k
Stop Working from a Prison Cell
Avatar for Chris Michel hatefulcrawdad
271
21k
Context Engineering - Making Every Token Count
Avatar for Addy Osmani addyosmani
3
58
Performance Is Good for Brains [We Love Speed 2024]
Avatar for Tammy Everts tammyeverts
12
1.1k
CSS Pre-Processors: Stylus, Less & Sass
Avatar for Bermon Painter bermonpainter
358
30k
Connecting the Dots Between Site Speed, User Experience & Your Business [WebExpo 2025]
Avatar for Tammy Everts tammyeverts
8
530

Transcript

  1. SERIOUSLY STRONG SECURITY ON A SHOESTRING content warning: sexual assault

  2. SERIOUSLY STRONG SECURITY ON A SHOESTRING Kelsey Gilmore-Innis @_K_E_L_S_E_Y nerd.kelseyinnis.com

  3. Callisto www.projectcallisto.org

  4. IT DOESN’T TAKE AN ARMY

  5. YOU CAN’T SECURE DATA ON THE INTERNET

  6. YOU CAN SECURE DATA ON THE INTERNET

  7. START FROM SOLID FOUNDATIONS

  8. KNOW YOUR STRENGTHS

  9. KNOW YOUR STRENGTHS •CLOUD HOSTING •PLATFORM AS A SERVICE •CONTENT

    DISTRIBUTION NETWORKS

  10. KNOW YOUR THREATS

  11. SECURITY REQUIRES EMPATHY

  12. YOUR BIGGEST THREAT IS IN THIS ROOM

  13. YOUR SECOND BIGGEST THREAT IS WHO YOU’RE TRYING TO PROTECT

  14. TELL ME YOUR CAT’S NAME AND I CAN ACCESS YOUR

    WHOLE WORLD • ZXCVBN • CMU’s USABLE PRIVACY & SECURITY LAB • RATE LIMITING

  15. “COMPUTER” CAN MEAN MANY THINGS

  16. BOUNDARIES ARE HARD

  17. DON’T GET CUTE

  18. BE LAZY BUT NOT COMPLACENT

  19. PAY SOMEONE SMARTER

  20. THANKS! www.projectcallisto.org nerd.kelseyinnis.com