Catching Waves in the Ocean of Quality
summary
Builds a single authentication platform (OAuth2 / OpenID Connect, client SDK, playground) to replace ~10 divergent implementations, scales for 10x web/mobile logins, and eliminates account takeover while cutting fraud losses and operation cost; hires ~70 engineers during a rapid org ramp from a few hundred to ~12,000 employees and ships core features in ~6–12 months. Adds a deletion certification engine that repeatedly verifies removals, and a data-filtering framework with differential privacy filters, plus context propagation and signed nonces for data-layer authorization.
AI-written summary · about
chapters (45)
- 0:00Introduction
- 3:00Culture
- 4:55Software
- 7:48Background
- 8:19What to do first
- 10:10Why customer authentication
- 12:28Why usability
- 13:07Why scalability
- 13:30Why extensible
- 13:55Project structure
- 15:08Architecture
- 16:25Data Deleting
- 18:13Data Filtering
- 18:49Data Sharing
- 19:36Filtering Technology
- 20:03Differential Privacy
- 23:46Data Filtering Framework
- 24:29Authorization
- 25:10Authorization Flow
- 28:11Policy Management Service
- 29:03Application Security Services
- 29:49Three ways companies defend against risk
- 30:55Dynamic security
- 32:25Key cryptography
- 33:02Publicprivate key cryptography
- 33:23Perfect forward secrecy
- 34:49Why Security
- 35:35Market Demand
- 36:26More Jobs
- 36:59Lack of A
- 37:33Security and Quality
- 37:52Downsides of Security
- 38:05Nonsense Products
- 38:35Security Products
- 38:49Shared Scapegoat Problem
- 39:02The Stakes Can Be Higher
- 39:19Things You Already Know
- 39:37Successful Security
- 40:03Human Prioritization
- 40:20Risk Management
- 40:38What next
- 42:03Athlete Tools
- 42:34Resources
- 43:21Crosspollination
- 43:58QA
related talks
18mShifting Authentication at Scale
15mOne Platform Product for All: A Revolution
40mIn the Pursuit of the Best Developer Experience
22mWorkforce FIDO2 Orchestration Lessons Learned From Millions of Issued Credentials
21mShipping Faster: Behind the Scenes of How We Built
41mAppSec From the Ground Up
10mStrategies for testing Authentication and Authorization Flows
49mRunning system tests with active authn/z