Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Andrew Yates' Slides at NSSpain 2014

Avatar for Luis Ascorbe Luis Ascorbe
September 18, 2014
Programming
0
110

Andrew Yates' Slides at NSSpain 2014

Avatar for Luis Ascorbe

Luis Ascorbe

September 18, 2014
Tweet

More Decks by Luis Ascorbe

See All by Luis Ascorbe
Snapshot Testing at CMD+U Conf
Avatar for Luis Ascorbe lascorbe
2
130
Dave Verwer's Slides at NSSpain 2014
Avatar for Luis Ascorbe lascorbe
0
120
Alberto Lopez's Slides at NSSpain 2014
Avatar for Luis Ascorbe lascorbe
0
37
Erik Erice's Slides at NSSpain 2014
Avatar for Luis Ascorbe lascorbe
0
93
Krzysztof Zabłocki's Slides at NSSpain 2013
Avatar for Luis Ascorbe lascorbe
8
440
Luis Solano's Slides at NSSpain 2013
Avatar for Luis Ascorbe lascorbe
3
120
Daniel Eggert's Slides at NSSpain 2013
Avatar for Luis Ascorbe lascorbe
8
200
Nacho Soto's Slides at NSSpain 2013
Avatar for Luis Ascorbe lascorbe
4
130

Other Decks in Programming

See All in Programming
技術的負債で信頼性が限界だったWordPress運用をShifterで完全復活させた話
Avatar for adachi.ryo rvirus0817
1
1.9k
大規模FlutterプロジェクトのCI実行時間を約8割削減した話
Avatar for teamLab teamlab
PRO
0
490
Claude Codeで実装以外の開発フロー、どこまで自動化できるか？失敗と成功
Avatar for ndaDayo.Sugawawa ndadayo
2
340
ワープロって実は計算機で
Avatar for Chiharu Shirasaka pepepper
2
1.4k
一人でAIプロダクトを作るための工夫 〜技術選定・開発プロセス編〜 / I want AI to work harder
Avatar for r-kagaya rkaga
12
2.7k
CLI ツールを Go ライブラリ として再実装する理由 / Why reimplement a CLI tool as a Go library
Avatar for ktr ktr_0731
3
1.1k
パスタの技術
Avatar for Yusuke Wada yusukebe
1
390
AI時代のドメイン駆動設計-DDD実践におけるAI活用のあり方 / ddd-in-ai-era
Avatar for MinoDriven minodriven
21
8.4k
Honoアップデート 2025年夏
Avatar for Yusuke Wada yusukebe
1
790
学習を成果に繋げるための個人開発の考え方 〜 「学習のための個人開発」のすすめ / personal project for leaning
Avatar for panda_program panda_program
1
100
AIに安心して任せるためにTypeScriptで一意な型を作ろう
Avatar for Yuki Yata arfes0e2b3c
0
380
生成AI、実際どう？ - ニーリーの場合
Avatar for Nealle nealle
0
140

Featured

See All Featured
Evolution of real-time – Irina Nazarova, EuRuKo, 2024
Avatar for Irina Nazarova irinanazarova
8
890
Java REST API Framework Comparison - PWX 2021
Avatar for Matt Raible mraible
33
8.8k
Save Time (by Creating Custom Rails Generators)
Avatar for Garrett Dimon garrettdimon
PRO
32
1.4k
The Web Performance Landscape in 2024 [PerfNow 2024]
Avatar for Tammy Everts tammyeverts
9
770
The Cost Of JavaScript in 2023
Avatar for Addy Osmani addyosmani
53
8.8k
The Art of Delivering Value - GDevCon NA Keynote
Avatar for David Neal reverentgeek
15
1.6k
Why Our Code Smells
Avatar for Brandon Keepers bkeepers
PRO
338
57k
Designing for humans not robots
Avatar for Tammie Lister tammielis
253
25k
Git: the NoSQL Database
Avatar for Brandon Keepers bkeepers
PRO
431
65k
Become a Pro
Avatar for Speaker Deck speakerdeck
PRO
29
5.5k
Statistics for Hackers
Avatar for Jake VanderPlas jakevdp
799
220k
The Pragmatic Product Professional
Avatar for Laura Van Doore lauravandoore
36
6.8k

Transcript

  1. None

  2. What to do when you get hacked? @ay8s

  3. None
  4. None

  5. What happened?

  6. “Very happy I lost tons of weight easily with this

    special fruit.. “I lost 8 pounds this past week! All thanks to this new secret” “I lost 8 pounds this past week! All thanks to this new secret” “Very happy I lost tons of weight easily with this special fruit..
  7. None
  8. None

  9. So what to do…

  10. Communicate

  11. None
  12. None

  13. Make sure your customers know where to turn when something

    goes wrong.
  14. None
  15. None

  16. Act

  17. Reset Keys, Secrets etc.

  18. Encrypt

  19. Expedited Review

  20. Expedited Review

  21. Utilise Help

  22. Investigate

  23. Check GitHub Sessions

  24. None

  25. 30,000 Facebook Accounts Affected.

  26. None

  27. Act, again…

  28. If you can, don’t include keys, secrets

  29. OAuth / Native Auth

  30. Two Factor “ALL the things”

  31. Security Audits

  32. Rewards

  33. Lastly…

  34. Don’t Panic

  35. None
  36. None

  37. Signups Metrics

  38. None
  39. None

  40. Some more reading…

  41. ✉ andy@bufferapp.com @ay8s