Culver: Secret management is a huge market opportunity in developer security
Leah Culver · Leah Culver of Breaker and Tom Sparks of YC Answer Your Questions About Security and Podcasting · Y Combinator · Jan 5, 2018 · at 45:36
Leah Culver (CTO of Breaker) and Tom Sparks discuss the security challenges software development teams face when managing and revoking API keys and credentials.
0:00 / 0:28exact quote · 28.4s
▶ Watch the full episode on YouTube → 720p mp4 · rendered on demand · StarZero watermark
“I think there's a huge opportunity in security to do sort of secret management. Like, right now, things are just like, oh, put in an n variable, or whatever, it's like so bad, and for us, as soon as you have a team of more than, like, two people, you need to be sharing all sorts of private information, and with companies it's like, if someone joins the company, you gotta set it all up. If they leave, like, you have to somehow, like, revoke all these tokens, right? So it's pretty terrible right Right now. I think there's a huge opportunity there.”
quote is from the automated transcript, cleaned for reading: filler sounds and stutters are removed, nothing is rephrased. names can be misheard (the analysis reads context, assessments check outside sources). how →
More from Leah Culver
Culver: Law Enforcement Accesses Biometrics More Easily Than iPhone Passcodes
“I think it's much easier for law enforcement to access your phone via touch ID, like you were saying through touch ID or facial recognition. But the nice thing Apple does is if you have three failed attempts, Or if you shut off your phone, you have to reenter …”
Culver: Passwords surpass biometrics because compromised credentials can be replaced
“What's really nice about the device and something you remember is you can replace it. So if it were to get stolen, so if someone takes a cast of your It's a lot harder to change your thumbprint than it is to change your password, right? So a nice nice security…”
Culver: User error is the number one security concern in crypto
“Some of the biggest security concern right now, I'd say the number one is user error, right?”
Culver: Producing a TV show is roughly 100x more expensive than a quality podcast
“It's like a hundred X more expensive to produce a television show than to produce a podcast, a quality podcast.”
Culver: Register only one thumb to intentionally trigger iPhone passcode lockouts
“I tend to only put one of my thumbs in the thumbprint so that if I needed to, I could use my other thumb and just pretend like, oh, it's just, I'm nervous. It's not working. Until it locks me out.”
Culver: iOS developers must store sensitive data in Keychain, not Info.plist
“Big thing for me is keeping private data in the key chain. It's an iOS developer and not in any other local files, especially not in NS user defaults or putting it in the info.plist file. Don't put stuff in there. You can unzip An app directory to look at anyo…”