Explore a thought-provoking conference talk that delves into the complexities of security proxying and delegation in the digital age. Examine the parallels between durable power of attorney and digital access, and how modern technology has blurred the lines between personal and professional identities. Investigate the challenges of working across multiple organizations, context governance, and the intricacies of federation. Learn from real-life examples, including the speaker's personal experiences with Google accounts and family dynamics. Discuss the arguments for and against using others' accounts, the potential legal implications, and the need for industry-wide standardization. Conclude with short-term recommendations and the concept of a digital concierge service to address these evolving security challenges.
Overview
Syllabus
Introduction
Proxying vs Delegation
Durable Power of Attorney
Root vs Pseudo
Our Back
Old fashioned entitlements
The problem we got into
Working for more than one organization or department
Context Governance
Identity
Functions
Game of Clue
Federation
Non enterprise roles
Incapacitation
Example
Delegation Authority
Authentication
Passwords
My Dad
The elegance of programming
My dad didnt believe in security
How do you do this
Arguments for using their accounts
Arguments against using their accounts
Google turned me into my mother
I had for Gmail accounts
I added my other personal email as an alternate
And my mothers
Thats scary
If youre Superman
Googles response
Other problems
CFAA
Shortterm recommendations
Industrywide standardization
Digital concierge service
Conclusion
Questions Comments
