Cascadia Ruby 2014- 80,000 Plaintext Passwords: An Open Source Love Story in Three Acts

Channel:
United States Confreaks
Subscribers:
42,400
Published on ● Video Link: https://www.youtube.com/watch?v=xxr24ficpPU


Duration: 25:01
276 views
5

By, T.J. Schuck
fluffmuffin, peppercorn, gilligan — those are just a few of our users' plaintext passwords.

I have 80,000 more, and it only took me 87 seconds to gather them from our customer database in a white-hat attack.

In Act I, we'll cover the history of secure password storage, examine the hack, and mitigate the threat. Act II will address the difficulties of working on libraries with complicated external dependencies (like bcrypt-ruby, of which I'm now a maintainer). In Act III, we'll celebrate the power of global collaboration via OSS.

[Scene.]

Help us caption & translate this video!

http://amara.org/v/FGYP/



Other Videos By Confreaks


2014-09-11DjangoCon 2014- All You Need Is L***
2014-09-04LA Ruby Conf 2011 Securing Your Rails App by Jim Weirich and Matt Yoho
2014-08-21Cascadia Ruby 2014- Lightning Talks
2014-08-21Cascadia Ruby 2014- SPAAAAAAAAACE
2014-08-21Cascadia Ruby 2014- Nitty Gritty Service Building
2014-08-21Cascadia Ruby 2014- How Not to Be Lonely: An Extrovert's Guide to Working Alone
2014-08-20Cascadia Ruby 2014- "Good luck with that": Tag Teaming Civic Data
2014-08-20Cascadia Ruby 2014- Creating a Chat App in 15 Minutes with Angelo
2014-08-20Cascadia Ruby 2014- Programming in the Small - Teaching my 5 Year Old Ruby
2014-08-20Cascadia Ruby 2014- Be Awesome By Being Boring
2014-08-20Cascadia Ruby 2014- 80,000 Plaintext Passwords: An Open Source Love Story in Three Acts
2014-08-19Cascadia Ruby 2014- N design patterns you might actually use
2014-08-19Cascadia Ruby 2014- Cloning the Seattle Ruby Brigade
2014-08-19Cascadia Ruby 2014- Biggish Data With Rails and Postgresql
2014-08-18Cascadia Ruby 2014- Why We Can't Have Nice Things: Unicode, Dates, and Names
2014-08-18Cascadia Ruby 2014- Designing for Empathy
2014-08-18Cascadia Ruby 2014- Cognitive Shortcuts: Models, Visualizations, Metaphors, and Other Lies
2014-08-18Cascadia Ruby 2014- The Science of Success
2014-08-18Cascadia Ruby 2014- Speed up Rails, Speed up Your Code
2014-08-16Elixir Conf 2014 - Introduction to Elixir for Rubyists by Josh Adams & Robby Clement
2014-08-13Elixir Conf 2014 - Fear and the Evolution of Languages by Bruce Tate


Tags:
CascadiaRuby
Confreaks
Ruby