Status / Meetup // July 2018 Security Summit

No description provided.

Status July 2018 Security Meetup (Day 2 Morning session)
01:11:53 Perfect Forward Secrecy
01:14:34 UX compromises
01:15:38 GPG
01:16:41 SSL
01:17:31 IPSEC
01:17:56 OTR
01:19:32 Double ratchet
01:21:33 FS on Status
01:45:50 Threat modeling with STRIDE
01:49:55 What, Why and How
01:50:31 The Methodology
01:58:41 Spoofing
01:58:14 Tampering
02:00:38 Repudiation
02:01:05 Information Disclosure
02:01:31 DoS
02:02:23 Elevation of Privilege
02:06:01 Technique: Threat trees
02:09:04 Analyzing Risks
02:09:16 Likelihood
02:12:36 Impact
02:16:05 Links

Status July 2018 Security Meetup (Day 1 Afternoon session)
00:00:00 Security Champions
00:02:07 The Framework
00:03:26 Who are Security Champions
00:06:22 Why are Security Champions
00:09:33 How are Security Champions
00:09:56 Identify the teams
00:10:21 Define the role
00:11:57 Nominate Champions
00:14:19 Setup comms
00:15:40 Build KB
00:16:30 Maintain Interest
00:25:00 Recap
00:30:44 Analyzing and Documenting user risks and use errors
00:31:32 Goals
00:32:16 UXR's role in risk management
00:33:24 Observing security risks in the wild
00:37:54 Testing risk mitigation in the lab
00:42:44 What we learned so far
00:48:08 Models and knowledge of human behavior
00:56:27 Interaction categories
00:59:00 Anatomy of an effective warning
01:04:39 Risk analysis and documentation
01:28:40 Current (not new) communication protocol
02:09:34 Recap

Status July 2018 Security Meetup (Day 1 Morning session)
00:00:00 Introduction
00:07:37 Security
00:09:56 Coercion resistance
00:14:04 Privacy
00:21:05 Short history about security at Status
00:27:55 Wall of Shame
00:47:20 Audit Process
01:07:46 Bug Bounty Program
01:12:20 Hiring
01:15:34 Security at Status