[Dec 12] Identity 101; Stranger Danger; Networking

The Seattle Identity and Security Meetup is an informal evening open to all. We have two talks. The evening ends with a networking session.

Please arrive at about 6pm for a 6.30pm start. We will be meeting on the 2nd floor of 10900 8th Street NE · Bellevue, WA. There is a parking garage located next to the building with a sky bridge to the 2nd floor. Once on the 2nd floor, look for a room with a Seattle ISM sign. That is our room.

We value diversity and operate a strict code of conduct, for the comfort of all our members.

Talk 1: Identity 101
Bobby Johnson
Auth0

When you first set out to add authentication to your app, it might be scary. It is after all an important part of every successful application.

You start doing some research and quickly get overwhelmed by all the terminology and concepts you come across. What's a token and how do you use them? What does OpenID Connect do? Do I need single sign on?

Don't worry, in this talk we'll go over the basics of identity. I'll try explain some of the most common standards and best practices, and when to use them.

Talk 2: Stranger Danger - Addressing the Security Risk in Dependencies
Geva Solomonovich
Snyk

Open source modules are undoubtedly awesome. However, they also represent an undeniable and massive risk. You’re introducing someone else’s code into your system, often with little or no scrutiny. Each component may have vulnerabilities, be compromised, or even be outright malicious. Multiply that risk by hundreds of dependencies, and you have a recipe for disaster.

The talk will use a sample application, Goof, which uses various vulnerable dependencies - which we will exploit as an attacker would. For each issue, we'll explain why it happened, show its impact, and – most importantly – see how to avoid or fix it.