Insight
Culver: Law Enforcement Accesses Biometrics More Easily Than iPhone Passcodes
“I think it's much easier for law enforcement to access your phone via touch ID, like you were saying through touch ID or facial recognition. But the nice thing Apple does is if you have three failed attempts, Or if you shut off your phone, you have to reenter …”
Insight
Culver: Passwords surpass biometrics because compromised credentials can be replaced
“What's really nice about the device and something you remember is you can replace it. So if it were to get stolen, so if someone takes a cast of your It's a lot harder to change your thumbprint than it is to change your password, right? So a nice nice security…”
Opinion
Culver: User error is the number one security concern in crypto
“Some of the biggest security concern right now, I'd say the number one is user error, right?”
Assertion Not checkable as stated
Culver: Producing a TV show is roughly 100x more expensive than a quality podcast
“It's like a hundred X more expensive to produce a television show than to produce a podcast, a quality podcast.”
Disclosure
Culver: Register only one thumb to intentionally trigger iPhone passcode lockouts
“I tend to only put one of my thumbs in the thumbprint so that if I needed to, I could use my other thumb and just pretend like, oh, it's just, I'm nervous. It's not working. Until it locks me out.”
Insight
Culver: iOS developers must store sensitive data in Keychain, not Info.plist
“Big thing for me is keeping private data in the key chain. It's an iOS developer and not in any other local files, especially not in NS user defaults or putting it in the info.plist file. Don't put stuff in there. You can unzip An app directory to look at anyo…”
Opinion
Culver: Secret management is a huge market opportunity in developer security
“I think there's a huge opportunity in security to do sort of secret management. Like, right now, things are just like, oh, put in an n variable, or whatever, it's like so bad, and for us, as soon as you have a team of more than, like, two people, you need to b…”
Disclosure
Culver: 20 to 30 people worked on OAuth's first version
“So I worked on OAuth the first version. Which is maybe not as good as subsequent versions, but worked on the first version, but it was a large team. I'd say at any given time we had, you know, 20, 30 people working on different parts of it.”
