Neil Matatall -- AppSec at Scale

Neil Matatall is an engineer with a background in security. He has previously worked at GitHub and Twitter and is a co-founder of Loco Moco Product Security Conference. Neil joins us for his second visit, to discuss account security at scale. He describes the underlying principles behind security at scale, how he worked to build a sign-in analysis feature, and how attacks were detected. We ended the conversation with an authentication lightning round, with Neil responding to various statements about authentication off the cuff! We hope you enjoy this episode with Neil Matatall. He's previously worked at GitHub and Twitter and is a co-founder of the LocoMoco Product Security Conference.The Application Security Podcast is brought to you by Security Journey.About Security JourneyNeil Matatall is an engineer with a background in security.→ Learn more about Security JourneyConnect with Neil Matatall:→ Loco Moco Product Security Conference→ Have I Been PwnedMentioned in this episode:→ Loco Moco Product Security Conference→ Have I Been PwnedFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Neil Matatall: AppSec at Scale05:46 Any kind of other thoughts on that from that perspective about07:28 Something like, well, I was going to borrow it and use10:19 You've sort of, I think, spoken to this in terms of13:13 Did you build this sign-in analysis piece20:14 The thing I love that you're bringing out in this conversation24:57 Do I need to change it now27:20 You've talked about quite a few ways of detecting the different30:18 Using the API example, let's play this one out a little34:32 No, that's neat that GitHub detects that as they come in