Culver: 20 to 30 people worked on OAuth's first version
Leah Culver · Leah Culver of Breaker and Tom Sparks of YC Answer Your Questions About Security and Podcasting · Y Combinator · Jan 5, 2018 · at 18:00
Breaker co-founder Leah Culver discusses her background contributing to the creation of open security standards like OAuth.
0:00 / 0:14exact quote · 14.4s
▶ Watch the full episode on YouTube → 720p mp4 · rendered on demand · StarZero watermark
“So I worked on OAuth the first version. Which is maybe not as good as subsequent versions, but worked on the first version, but it was a large team. I'd say at any given time we had, you know, 20, 30 people working on different parts of it.”
quote is from the automated transcript, cleaned for reading: filler sounds and stutters are removed, nothing is rephrased. names can be misheard (the analysis reads context, assessments check outside sources). how →
More from Leah Culver
Culver: Law Enforcement Accesses Biometrics More Easily Than iPhone Passcodes
“I think it's much easier for law enforcement to access your phone via touch ID, like you were saying through touch ID or facial recognition. But the nice thing Apple does is if you have three failed attempts, Or if you shut off your phone, you have to reenter …”
Culver: Passwords surpass biometrics because compromised credentials can be replaced
“What's really nice about the device and something you remember is you can replace it. So if it were to get stolen, so if someone takes a cast of your It's a lot harder to change your thumbprint than it is to change your password, right? So a nice nice security…”
Culver: User error is the number one security concern in crypto
“Some of the biggest security concern right now, I'd say the number one is user error, right?”
Culver: Producing a TV show is roughly 100x more expensive than a quality podcast
“It's like a hundred X more expensive to produce a television show than to produce a podcast, a quality podcast.”
Culver: Register only one thumb to intentionally trigger iPhone passcode lockouts
“I tend to only put one of my thumbs in the thumbprint so that if I needed to, I could use my other thumb and just pretend like, oh, it's just, I'm nervous. It's not working. Until it locks me out.”
Culver: iOS developers must store sensitive data in Keychain, not Info.plist
“Big thing for me is keeping private data in the key chain. It's an iOS developer and not in any other local files, especially not in NS user defaults or putting it in the info.plist file. Don't put stuff in there. You can unzip An app directory to look at anyo…”