Developers, developers, developers. When DevOps Fails to secure.

No ratings

Presented at CypherCon3.0 2018 by

David Bryan

In the last year, I’ve found some pretty stupid security mistakes. Blatantly overlooked controls, or flat out lazy system admins. I will show real-world examples of misuse & abuse, and improper data handling of passwords inside application code. When talking about the security of a system as a whole, we must remember a breech in one system, can lead to a breach on another system because of the implicit trust relationships we build to get the job done.I will cover how we pulled down 1.2M hashes and cracked them and what controls were missed, and how to prevent it from happening again.