The Hip Approach to Safeguarding your Users
summary
Research shows teams routinely misidentify what needs safeguarding after work with over a dozen companies. Run short workshops with post‑its and prompt cards to brainstorm threats, then triage to about four high‑priority risks by combining estimated impact with likelihood rather than intuition. Fixes focus on straightforward functionality changes, component scanning (SCA) like WhiteSource, and static analysis/CI integration (eg Checkmarx) plus lightweight code review. Fund work by reframing fixes as product features or paid security tiers; workshop materials and a security survey are available.
AI-written summary · about
chapters (8)
- 0:00Start
- 1:35Cambridge Analytical Scandal
- 3:47Whatsapp
- 6:48Elevation of Privilege
- 7:39Risk Assessment
- 10:06What Sorts of Things Are Good for Fixing Security Problems
- 10:20Functionality Changes
- 19:08Summary
related talks
31mPrioritizing Trust while Creating Applications
49mPragmatic Approaches To Building Secure Software
01h 03mBe your own Threatbuster!
01h 04mShifting Security Everywhere
38mPrioritizing Trust While Creating Applications
58mHow to embed security into your process
42mDon't Feed the Hippos
27mSecurity: The Thing That Everyone...