Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Kelsey Gilmore-Innis - Seriously Strong Securit...

Avatar for PyCon 2016 PyCon 2016
June 01, 2016
Programming
6
930

Kelsey Gilmore-Innis - Seriously Strong Security on a Shoestring

Avatar for PyCon 2016

PyCon 2016

June 01, 2016
Tweet

More Decks by PyCon 2016

See All by PyCon 2016
Manuel Ebert - Putting 1 million new words into the dictionary
Avatar for PyCon 2016 pycon2016
6
930
Brett Slatkin - Refactoring Python: Why and how to restructure your code
Avatar for PyCon 2016 pycon2016
17
5.7k
Mike Graham - The Life Cycle of a Python Class
Avatar for PyCon 2016 pycon2016
7
8.8k
Nathaniel Manista, Augie Fackler - Code Unto Others
Avatar for PyCon 2016 pycon2016
0
520
Alex Gaynor - The cobbler's children have no shoes, or building better tools for ourselves
Avatar for PyCon 2016 pycon2016
0
790
Adrienne Lowe - Bake the Cookies, Wear the Dress: Connecting with Confident Authenticity
Avatar for PyCon 2016 pycon2016
0
360
Jake Vanderplas - Statistics for Hackers
Avatar for PyCon 2016 pycon2016
18
5.1k
Daniele Procida - Documentation-driven development - lessons from the Django Project
Avatar for PyCon 2016 pycon2016
3
860
Shannon Quinn - Python for Public Health: Building Statistical Models of Ciliary Motion
Avatar for PyCon 2016 pycon2016
0
550

Other Decks in Programming

See All in Programming
AIエージェントでのJava開発がはかどるMCPをAIを使って開発してみた / java mcp for jjug
Avatar for Naoki Kishida kishida
4
780
Promise.tryで実現する新しいエラーハンドリング New error handling with Promise try
Avatar for おおいし bicstone
3
1.7k
乱雑なコードの整理から学ぶ設計の初歩
Avatar for 増田 亨 masuda220
PRO
32
15k
Chart.jsで長い項目を表示するときのハマりどころ
Avatar for yumechi(Motoki Hirao) yumechi
0
160
無秩序からの脱却 / Emergence from chaos
Avatar for nrs nrslib
1
9.2k
PHPライセンス変更の議論を通じて学ぶOSSライセンスの基礎
Avatar for Atsushi Matsuo matsuo_atsushi
0
170
オフライン対応！Flutterアプリに全文検索エンジンを実装する @FlutterKaigi2025
Avatar for JaiChangPark itsmedreamwalker
2
280
目的で駆動する、AI時代のアーキテクチャ設計 / purpose-driven-architecture
Avatar for MinoDriven minodriven
11
3.5k
Private APIの呼び出し方
Avatar for Kishikawa Katsumi kishikawakatsumi
3
900
なぜ強調表示できず ** が表示されるのか — Perlで始まったMarkdownの歴史と日本語文書における課題
Avatar for hkws kwahiro
12
7.2k
Micro Frontendsで築いた 共通基盤と運用の試行錯誤 / Building a Shared Platform with Micro Frontends: Operational Learnings
Avatar for Yuto Kaneko kyntk
0
1.6k
Combinatorial Interview Problems with Backtracking Solutions - From Imperative Procedural Programming to Declarative Functional Programming - Part 1
Avatar for Philip Schwarz philipschwarz
PRO
0
110

Featured

See All Featured
The Psychology of Web Performance [Beyond Tellerrand 2023]
Avatar for Tammy Everts tammyeverts
49
3.2k
Easily Structure & Communicate Ideas using Wireframe
Avatar for Afnizar Nur Ghifari afnizarnur
194
17k
Exploring the Power of Turbo Streams & Action Cable | RailsConf2023
Avatar for Kevin Liebholz kevinliebholz
36
6.1k
The World Runs on Bad Software
Avatar for Brandon Keepers bkeepers
PRO
72
12k
The Cost Of JavaScript in 2023
Avatar for Addy Osmani addyosmani
55
9.3k
The Power of CSS Pseudo Elements
Avatar for Geoffrey Crofte geoffreycrofte
80
6.1k
Being A Developer After 40
Avatar for Adrian Kosmaczewski akosma
91
590k
The Pragmatic Product Professional
Avatar for Laura Van Doore lauravandoore
36
7k
The MySQL Ecosystem @ GitHub 2015
Avatar for Sam Lambert samlambert
251
13k
VelocityConf: Rendering Performance Case Studies
Avatar for Addy Osmani addyosmani
333
24k
Optimising Largest Contentful Paint
Avatar for Harry Roberts csswizardry
37
3.5k
Connecting the Dots Between Site Speed, User Experience & Your Business [WebExpo 2025]
Avatar for Tammy Everts tammyeverts
10
680

Transcript

  1. SERIOUSLY STRONG SECURITY ON A SHOESTRING content warning: sexual assault

  2. SERIOUSLY STRONG SECURITY ON A SHOESTRING Kelsey Gilmore-Innis @_K_E_L_S_E_Y nerd.kelseyinnis.com

  3. Callisto www.projectcallisto.org

  4. IT DOESN’T TAKE AN ARMY

  5. YOU CAN’T SECURE DATA ON THE INTERNET

  6. YOU CAN SECURE DATA ON THE INTERNET

  7. START FROM SOLID FOUNDATIONS

  8. KNOW YOUR STRENGTHS

  9. KNOW YOUR STRENGTHS •CLOUD HOSTING •PLATFORM AS A SERVICE •CONTENT

    DISTRIBUTION NETWORKS

  10. KNOW YOUR THREATS

  11. SECURITY REQUIRES EMPATHY

  12. YOUR BIGGEST THREAT IS IN THIS ROOM

  13. YOUR SECOND BIGGEST THREAT IS WHO YOU’RE TRYING TO PROTECT

  14. TELL ME YOUR CAT’S NAME AND I CAN ACCESS YOUR

    WHOLE WORLD • ZXCVBN • CMU’s USABLE PRIVACY & SECURITY LAB • RATE LIMITING

  15. “COMPUTER” CAN MEAN MANY THINGS

  16. BOUNDARIES ARE HARD

  17. DON’T GET CUTE

  18. BE LAZY BUT NOT COMPLACENT

  19. PAY SOMEONE SMARTER

  20. THANKS! www.projectcallisto.org nerd.kelseyinnis.com