Privacy, Consent and Security Within Modern Applications
summary
Regulators force engineering changes: GDPR scrutiny leads to CNIL fines and a rework of Android onboarding; German regulators invoke an 90-day GDPR injunction over undisclosed human review. Case studies: Equifax shows 8,500 unpatched vulnerabilities and faster-than-average containment (<90 days), AMCA loses ~90% revenue and files bankruptcy. Practical tech details cover IoT stacks — QR/BLE provisioning, MQTT broker and OTA updates, TLS choices, cloud microservices — and concrete risks from reidentifying “anonymized” datasets and downstream third‑party data flow.
AI-written summary · about
chapters (22)
- 0:00Intro
- 1:20Being a security target is costly
- 5:01Equifax breach focused attention on open source risk
- 7:31So what is "data" anyway?
- 8:39What about "data privacy" then?
- 9:40Example: New user with email identifier
- 10:46Example: Assumption of valid email
- 11:35"Consent" is a tricky concept
- 12:11"Trust" is the most complex of the concepts
- 13:08Top 12 questions when managing collected data
- 15:37GOPR actions not just for data breaches
- 18:05Reputational damage factors
- 19:33Anonymizing shared data doesn't guarantee privacy
- 21:44Web service APIs change risk dynamic
- 22:23Managing consent can be complicated
- 23:46loT development requires multiple disciplines
- 25:18Identity security targets from platform requirements
- 26:08Select development frameworks and environment
- 26:53Continuous security assessments during development
- 27:18Continuous security assessments during build
- 28:05Confirm governance and security target progress
- 28:44Key open source centric takeaways
related talks
52mDeveloping privacy
01h 07mSECURING PERSONAL DATA: THE “NEW” NORMAL
01h 00mPrivacy and GDPR: What all developers should know
34mAvoiding legal privacy and security snafus with big data and the IoT
01h 59mDeep Dive Workshop – Data Security and Data Protection
17mPrivacy Design Flaws
24mModern Android App Security: Protecting Code, Keys, and Data
31mHear no Evil, See no Evil, Code no Evil ();