Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Kelsey Gilmore-Innis - Seriously Strong Securit...

Sponsored · Your Podcast. Everywhere. Effortlessly. Share. Educate. Inspire. Entertain. You do you. We'll handle the rest. →
Avatar for PyCon 2016 PyCon 2016
June 01, 2016
Programming
970
6

Kelsey Gilmore-Innis - Seriously Strong Security on a Shoestring

Avatar for PyCon 2016

PyCon 2016

June 01, 2016

More Decks by PyCon 2016

See All by PyCon 2016
Manuel Ebert - Putting 1 million new words into the dictionary
Avatar for PyCon 2016 pycon2016
6
960
Brett Slatkin - Refactoring Python: Why and how to restructure your code
Avatar for PyCon 2016 pycon2016
17
5.8k
Mike Graham - The Life Cycle of a Python Class
Avatar for PyCon 2016 pycon2016
7
8.9k
Nathaniel Manista, Augie Fackler - Code Unto Others
Avatar for PyCon 2016 pycon2016
0
540
Alex Gaynor - The cobbler's children have no shoes, or building better tools for ourselves
Avatar for PyCon 2016 pycon2016
0
810
Adrienne Lowe - Bake the Cookies, Wear the Dress: Connecting with Confident Authenticity
Avatar for PyCon 2016 pycon2016
0
390
Jake Vanderplas - Statistics for Hackers
Avatar for PyCon 2016 pycon2016
19
8.7k
Daniele Procida - Documentation-driven development - lessons from the Django Project
Avatar for PyCon 2016 pycon2016
3
900
Shannon Quinn - Python for Public Health: Building Statistical Models of Ciliary Motion
Avatar for PyCon 2016 pycon2016
0
580

Other Decks in Programming

See All in Programming
AIエージェントと協働するCLI開発 — BunとOpenClawで学んだこと
Avatar for よしこ yoshikouki
1
230
Moments When Things Go Wrong
Avatar for Aurimas Liutikas aurimas
3
140
作って学ぶ、 JSX (TSX) ランタイムの基本
Avatar for syumai syumai
7
1.5k
肥大化するレガシーコードに立ち向かうためのインターフェース分離と依存の逆転 / JJUG CCC 2026 Spring
Avatar for hirokuni-maeta hirokunimaeta
0
470
ふつうのFeature Flag実践入門
Avatar for irof irof
7
3.5k
New "Type" system on PicoRuby
Avatar for pocke pocke
1
430
The NotImplementedError Problem in Ruby
Avatar for Koichi ITO koic
0
320
ローカルLLMを使ってB2Bサービスを作っていての学び
Avatar for Hiroshige Umino yaotti
0
110
Old Dog, New Tricks: The Java 25 Reinvention - JNation
Avatar for A N M Bazlur Rahman bazlur_rahman
0
140
inferと仲良くなる10分間
Avatar for ryokatsuse ryokatsuse
1
360
oxlintはeslint/typescript-eslintを置き換えられるのか
Avatar for shoma-fujita shomafujita
2
310
AI時代の仕事技芸論 — ソフトウェア開発で「遊ぶように働く」職人的熟達のすすめ
Avatar for Yoshihito Kuranuki / 倉貫義人 kuranuki
1
600

Featured

See All Featured
Bash Introduction
Avatar for André Augusto Costa Santos 62gerente
615
210k
Designing Powerful Visuals for Engaging Learning
Avatar for Mike Taylor tmiket
1
390
A designer walks into a library…
Avatar for Paul Jervis Heath pauljervisheath
211
24k
svc-hook: hooking system calls on ARM64 by binary rewriting
Avatar for Akira Moroo retrage
2
280
職位にかかわらず全員がリーダーシップを発揮するチーム作り / Building a team where everyone can demonstrate leadership regardless of position
Avatar for MADOX madoxten
62
54k
The Spectacular Lies of Maps
Avatar for Per Axbom axbom
PRO
1
780
Between Models and Reality
Avatar for mayunak mayunak
4
320
Facilitating Awesome Meetings
Avatar for Lara Hogan lara
57
6.9k
Amusing Abliteration
Avatar for ianozsvald ianozsvald
1
190
Why Mistakes Are the Best Teachers: Turning Failure into a Pathway for Growth
Avatar for Umar Saidu Auna auna
0
150
The Language of Interfaces
Avatar for Des Traynor destraynor
162
27k
Improving Core Web Vitals using Speculation Rules API
Avatar for Sergey Chernyshev sergeychernyshev
21
1.5k

Transcript

  1. SERIOUSLY STRONG SECURITY ON A SHOESTRING content warning: sexual assault

  2. SERIOUSLY STRONG SECURITY ON A SHOESTRING Kelsey Gilmore-Innis @_K_E_L_S_E_Y nerd.kelseyinnis.com

  3. Callisto www.projectcallisto.org

  4. IT DOESN’T TAKE AN ARMY

  5. YOU CAN’T SECURE DATA ON THE INTERNET

  6. YOU CAN SECURE DATA ON THE INTERNET

  7. START FROM SOLID FOUNDATIONS

  8. KNOW YOUR STRENGTHS

  9. KNOW YOUR STRENGTHS •CLOUD HOSTING •PLATFORM AS A SERVICE •CONTENT

    DISTRIBUTION NETWORKS

  10. KNOW YOUR THREATS

  11. SECURITY REQUIRES EMPATHY

  12. YOUR BIGGEST THREAT IS IN THIS ROOM

  13. YOUR SECOND BIGGEST THREAT IS WHO YOU’RE TRYING TO PROTECT

  14. TELL ME YOUR CAT’S NAME AND I CAN ACCESS YOUR

    WHOLE WORLD • ZXCVBN • CMU’s USABLE PRIVACY & SECURITY LAB • RATE LIMITING

  15. “COMPUTER” CAN MEAN MANY THINGS

  16. BOUNDARIES ARE HARD

  17. DON’T GET CUTE

  18. BE LAZY BUT NOT COMPLACENT

  19. PAY SOMEONE SMARTER

  20. THANKS! www.projectcallisto.org nerd.kelseyinnis.com