What is our Ethical Obligation to Ship Secure Code?
summary
Faster Than Light builds developer tools that push security earlier into development and argues companies must do more than meet Terms of Service. Example: blockchain startups refuse to launch without line-by-line code review and public audit reports, sometimes paying auditors in tokens, and that practice forces fixes before release. Practical advice includes don't hold user data as a defense and using static analysis plus manual review; one cited class-action seeks $100M over a breach, showing financial stakes for shipping insecure code.
AI-written summary · about
chapters (15)
- 0:00Intro
- 1:00Welcome
- 2:30What are the obligations of companies towards users
- 3:20Marriott hotel data breach
- 3:53Terms of Service
- 5:18The Golden Rule
- 7:42What should companies do
- 9:13Individual liability
- 15:51Audit report
- 16:29Pentest report
- 17:03Auto report
- 17:54Static analysis
- 18:24Why did it happen
- 18:46Developers in a special moment
- 21:18Social media
related talks
03mGreat software is secure software
51mSecurity & Privacy in Digital First Businesses (Panel)
54mFrom App Security to Dev Security – Shift left with GitHub Advanced Security
49mPanel: From Code to Defense: Why Developers Are the New Security Leaders
38mDevOps Meet Sec: Your Journey To Delivering Secure Code Fast
45mBuilding Secure Software: Practical Strategies for Developers
56mSo Long Secure Coding - Practical Steps for Securing the entire SDLC
25mYour Software Supply Chain is Only as Secure as its Weakest Link