BEGIN:VCALENDAR
VERSION:2.0
PRODID:Data::ICal 0.24
BEGIN:VEVENT
DESCRIPTION:   'Title: New Frontiers in GitHub Secret Snatching\n   When: S
 aturday\, Aug 13\, 12:10 - 12:55 PDT\n   Where: LINQ - 3rd flr - Social B 
 and C (Recon Village) - [1]Map\n\n   SpeakerBio:Tillson Galloway\n   No BI
 O available\n   Twitter: [2]@tillson_\n\n   Description:\n   Even after ye
 ars of scolding from security teams around the world\,\n   GitHub remains 
 a developer's favorite place to post passwords\, API\n   tokens\, and prop
 rietary information. While these leaks have been\n   well-studied for more
  than three years\, gaps still remain in the\n   process of uncovering the
 se leaks. Many techniques for secret\n   searching only consider entities 
 with strong connections\n   companies––users who belong to the company
 's org and repositories\n   that are posted by the org itself. Most secret
 s have loose connections\n   with the organization––users that post th
 eir dotfiles and configs\,\n   for example. By combining a breadth-first a
 pproach to GitHub searching\n   along with heuristics for eliminating fals
 e positives\, we are able to\n   more effectively find secrets. We highlig
 ht recent work in the area of\n   secret sprawl and present a new techniqu
 e to find secrets across\n   GitHub.\n\n   This talk is the first to provi
 de the following: - A new\,\n   breadth-first technique to find secrets ac
 ross GitHub - Strategies for\n   false-positive reduction that can be appl
 ied to both source code +\n   other OSINT tools - Insight into the root ca
 uses of leaks– what\n   types of repos are more likely to be posted?\n\n
    '\n\n   1. https://defcon.outel.org/consolidated_page.html#Linq\n   2. 
 https://twitter.com/tillson_\n\n\n
DTEND:20220813T195500Z
DTSTART:20220813T191000Z
LOCATION:RCV - LINQ - 3rd flr - Social B and C (Recon Village)
SUMMARY:New Frontiers in GitHub Secret Snatching
END:VEVENT
END:VCALENDAR