Boneh: Post-launch UI security fixes face severe user adoption friction
Dan Boneh · a16z Podcast | Crypto, Security, CS, Quantum Computing, and More with Our New Professor-in-Residence · Jan 2, 2019 · at 38:35
Dan Boneh, Stanford computer science professor and a16z professor-in-residence, explains why software startups must integrate threat modeling from day one rather than treating security as a post-launch add-on.
0:00 / 0:16exact quote · 16.1s
▶ Watch the full episode on YouTube → 720p mp4 · rendered on demand · StarZero watermark
“Cause once your product is out there, once you build a user base, your users are used to using the product in a particular way. If it turns out that you have to make changes in the user interface because of security concerns, ah, that actually would make it harder to later on make those changes to make the product more secure.”
quote is from the automated transcript, cleaned for reading: filler sounds and stutters are removed, nothing is rephrased. names can be misheard (the analysis reads context, assessments check outside sources). how →
More from Dan Boneh
Boneh: An operating quantum computer will likely be built within his lifetime
“I would speculate that in my lifetime, We'll probably see some sort of a, of operating quantum computer.”
Boneh: Matter Labs achieved zkEVM capability decades ahead of expectations
“Compiling Uniswap V-II solidity into you know, a snark capable circuit. We thought this was going to be decades away and you got it to work.”
Boneh predicts Bitcoin and Ethereum data will survive until year 3000
“So I think that the Bitcoin and Ethereum blockchains are going to be with humanity now forever, you know, in the year 3000, you know, the era of Futurama, we're still going to be looking at the Ethereum and Bitcoin blockchains. Maybe they won't be called that,…”
Boneh: Shift to online life drives cybersecurity focus more than Snowden
“I think Snowden might be actually a small part of it. I think the bigger issue is that more and more of our lives are going online, and as more of our data is available on computers, it's obviously, obviously also available to be hacked and stolen, and so comp…”
Boneh: Smartphone-based 2FA fails when users browse directly on their mobile devices
“Unfortunately today all second factor authentication schemes are essentially based on, well, the smartphone. And what happens if you only interact with the website through your smartphone, right? So in fact, we're hearing more and more of people that the only …”