marcel, 7 months ago

#ChristineBejerasco talking about "Secure-by-Design: How do You Design with a Security Mindset for the User?" at #SCS23:

• Design for ease of use
• Design with misuse in mind
• How we failed to prevent online access/commerce, word processors, email, supply chains, IoT devices, … being misused

Design approaches:

• Password meters, outdated/weak software/plugins, keygrabbing preventions, password managers → #SSO, app #sandboxing, #FullDiskEncryption #FDE, …

marcel, 7 months ago

#ChristineBejerasco on the challenges of next year in the interview with @Folini :

Managing #ThirdParty risk, namely the potential security problems comes from using #SaaS services, will be the main challenge for the near future. And don't forget the subcontracters.

Christian Folini compared this to the #Xplain leak, without mentioning their name. #SCS23