This talk by Esther Co discusses the ethics and practicalities of whistleblowing in technology, particularly focusing on responsible disclosure of security vulnerabilities. She presents the '3 Ds' framework (Discovery, Debate, Disclosure) and discusses legal implications, ethical considerations, and best practices for reporting security issues. The talk includes case studies like the Ashley Madison hack and DigiNotar incident to illustrate different approaches to disclosure.
A thought-provoking talk about the responsibilities developers have regarding data privacy and security in the modern age. The speaker emphasizes how we've become too casual with handling user data, discusses the implications of permanent digital footprints, and provides practical advice for better data stewardship, including implementing proper protocols, checklists, and access controls.
This talk discusses approaches to securing data and communications in software-as-a-service applications, particularly focusing on end-to-end encryption, zero-knowledge systems, and practical ways to protect user data. The speaker uses a banking/financial data example to illustrate concepts around encrypting sensitive information while still maintaining service functionality. The talk concludes with practical advice for incrementally improving data security in applications.
Sam, CTO of CustomD, presents a talk on encryption and data privacy in Laravel applications. He introduces their open-source library 'eloquent-model-encrypt' which implements hybrid encryption (combining symmetric and asymmetric encryption) to securely protect user data while maintaining granular access control. The library helps developers implement proper encryption practices without dealing with the complex cryptographic details directly.