The Software Not the Human Is the Weakest Link
summary
The talk argues that software, not users, is the weakest link in security by presenting incidents and measurements: manipulating a public-transport ticket system with off‑the‑shelf tools and a cloned site to issue real tickets; governments accepting forged IDs at checkpoints; and NSA actions weakening cryptography. It catalogs nearly 700 data leaks and finds only 18 configuration-error types (mostly SQL injection) explain them, and shows that many breaches happen in minutes while vulnerabilities remain known for over a year.
AI-written summary · about
chapters (9)
- 0:00Start
- 0:59Understand your business
- 6:16Most software sucks
- 15:33Leaktober
- 16:00Lessons to learn
- 17:16DE RODE
- 21:14No free beer
- 23:29ICT Research
- 23:39Results
related talks
44mHumans as the Weakest Link
58mKeynote: What Got Us Here Wont Get Us There
38mDo You Feel Secure?
19mWeakest Link
55mBreaking and Fixing Web Application Security
41mThe Divine and Felonious Nature of Cyber Security
25mYour Software Supply Chain is Only as Secure as its Weakest Link- 25mYour Software Supply Chain is Only as Secure as its Weakest Link