Whispered Secrets
summary
Practical, code-first walkthrough that demonstrates working prototypes: a Go TLS example and an AES-over-UDP demo that show hybrid crypto (RSA for key exchange, AES for bulk) with frequent key rollover and HMAC signing for integrity. Claims include per-field searchable encrypted storage using distinct keys (even one-time-pad style) so stolen DBs yield noise, and multi-factor designs that route confirmations out of band. Operational controls listed: immutable deployments, third‑party pen tests, ISO‑style evidence. All examples compile and run; slides and code are available for download.
AI-written summary · about
chapters (31)
- 0:00Intro
- 2:05We all have secrets
- 2:34Some secrets are really awful
- 4:05Secrecy
- 4:37Laws
- 7:47Contracts
- 8:53Paranoia
- 10:21UFOs
- 12:02Freemium
- 14:53Stealth Bomber
- 16:30Metadata
- 17:38Trust
- 18:28Agenda
- 19:10Pipelines
- 21:16Architecting
- 21:31Encryption
- 23:43SSH
- 25:33Go
- 27:09Web Services
- 29:28UDP
- 31:27Client Code
- 31:45Public Private Encryption
- 32:18UDP packets
- 32:41Hybrid cryptography
- 34:24Digital signatures
- 35:57Page max
- 37:14Passwords
- 39:16Multifactor authentication
- 46:03Devops
- 46:43Search Authority
- 47:33Architecture
related talks
56mThe shimmy to the left: why security is coming for engineers
01h 04mSoftware Verification meets Real-World Cryptography
19mTrust, Tampering, and Transparency: What History Can Teach Us About Open Source...
01h 17mSecure by Design - Security Principles for the Working Architect
50mCracking the Code to Secure Software
37mAdd security to architecture one step at a time
52mSecure by Design, Revisited - Insights & Pitfalls
58mBuilding antifragile systems using Secure by Design