This event is in collaboration with The Yorkshire Cyber Security Cluster.
SPEAKER
Ben Sloan, Lead Engineer in the UK Civil Service, helping the government to build interesting things at scale
AGENDA
17:30 - Light refreshments
18:30 - Talk starts
19:30 - Event ends
SYNOPSIS
Have you ever upgraded a nuget package, then later found out that it almost led to the breach of millions of records of customer data? I have, and I’d like to tell you about it... Welcome to ‘The domino effect’.
This is an experience report / postmortem detailing how updating one of the most popular and common nuget packages in the world (probably in use in almost every .net project everywhere - Newtonsoft.Json) sparked a somewhat unpredictable chain of events which ultimately led to a customer database of millions of customers at a major e-commerce retailer becoming public, which could have been a major incident impacting peoples’ lives.
A thorough forensic investigation followed, and fortunately we were able to prove no data had been stolen or lost but only just by the skin of our teeth. This was the near-miss of all near-misses.
This talk looks at the ‘domino effect’ that happened from updating the package to data being left on a public and unprotected instance for almost two weeks.
More details: www.bcs.org
Tickets: www.eventbrite.co.uk
BCS is the leading professional body for those working in Information Technology (IT). We have over 65,000 members in more than 100 countries and are the qualifying body for Chartered IT Professionals (CITP).
More about BCS (www.bcs.org)
The South Yorkshire branch organises regular events for local BCS members, with guest speakers covering a broad range of IT fields and Organisations. Members following the BCS Continuing Professional Development (CPD) scheme are able to accrue points by attending these events. Non-members with an interest in any event are also welcome.
More about the Branch (sy.bcs.org)
The event programme runs each year consisting of eight meetings, held on the third Thursday of the month and starting in October.
More about the Events (sy.bcs.org)
The events programme and other branch activities are organised by the South Yorkshire Branch Committee. The committee welcomes new members and anyone interested in joining the committee are encouraged to talk to us at events. Nominations for new committee members are accepted at the branch AGM.
More about the Committee (sy.bcs.org)
