Behind Closed Doors: Managing Passwords in a Dangerous World
summary
Defines secrets as small radioactive required values and matches each to tooling, shows concrete threats including brute force, repo leaks, backups, traversal, code execution and laptop theft, and counts roughly eight attack surfaces. Maps solutions: avoid checked‑in files and git‑crypt, prefer trusted third party platforms for fast rotation, demos work with HashiCorp Vault and with cloud native AWS KMS S3 patterns, explains secure introduction and that HSMs buy strong protection at high cost.
AI-written summary · about
chapters (43)
- 0:00Intro
- 1:03Definition
- 2:10Secrets
- 2:49Tokens
- 3:21Keys
- 4:06Hot / Online
- 4:30Cold / Offline
- 5:11Slow
- 5:41Fast
- 6:41Properties
- 8:13Surfaces
- 8:34Brute Force
- 9:31Code Leak
- 9:52Backup Leak
- 10:30Traversal
- 11:22An Aside
- 12:10Root Exec
- 13:13Laptop Theft
- 13:32Higher Power
- 14:07Text Files
- 14:32git-crypt
- 15:14Another Aside
- 15:28Symmetric
- 17:02Cluster Managers
- 17:46Chef Encrypted Bags
- 18:06Ansible Vault
- 19:14Chef Vault
- 19:45Pre-encryption Admin
- 20:13Trusted Third Party Admin
- 20:47Hashicorp Vault
- 21:37Private S3
- 21:59Amazon KMS
- 22:30Sneaker
- 22:47Confidant
- 23:01Trousseau
- 23:12Sops
- 23:35Red October
- 24:15Barbican
- 26:39Pure Identity
- 27:14API Clients
- 27:41Config Management
- 28:22Consul Templates
- 28:59Summon
related talks
26mHow To Keep A Secret
38mKeeping Secrets - A Practical Approach to Managing Credentials
29mBe nice, help the person who hacks your servers to get your data
48mTurtles All the Way Down: Storing Secrets in the Cloud and the Data Center
33mIterative Security...
36mThe Art & Craft of Secrets: Using the Cryptographic Toolbox
29mSecuring Secrets in K8s Environments
39mSecurity in a DevOps World