Configurations: The Weak Link in the Security Chain
recording made private on YouTubehttps://youtu.be/kmPRZ7ahw4k
summary
Configurations regularly cause real breaches — one example exposes hundreds of millions of user records when files remain unencrypted. The talk claims a working open-source system, Configu, unifies fragmented stores, integrates HashiCorp Vault and other secret managers, and combines RBAC+ABAC to reduce over- and under-permission. It adds centralized change monitoring, ties into Ansible/Terraform/Puppet for automation, and aims to eliminate raw local copies; the demo presents it as functional and already in use.
AI-written summary · about
related talks
45mProtecting you from you: Misconfiguration-caused breaches
29mBuilding blocks of security lifecycle management
14mSecurity lifecycle management in a multicloud world
57mCloud’s Dirty Little Secret: It Was Misconfigs All Along
39mSecurity in a DevOps World
46mThe Nightmare for Attackers: An Infrastructure without Secrets
38mSecrets Management - Falling into the Pit of Success
30mBehind Closed Doors: Managing Passwords in a Dangerous World