© 2019 by PauseOnError. Proudly created with Wix.com

  • White Facebook Icon
  • White Twitter Icon
  • White Flickr Icon

Co-founders: John Sindelar, and Ernest Koe. Big props to our distinguished Steering Committee alumni: Lisette Wilson, Susan Fennema, Martha Zink, Todd Geist, Molly Connolly, Matt Navarre, Andy Gaunt, Kate Lee, Dan Weiss, and Gerald Chang.

susan
Oct 9, 2018

Objective Security Flags - making FMP security audits easier?

0 comments

by Dave Ramsey

 

I'd like to lead an open, public, and collaborative discussion to see if we can determine a set of indicators that can be caught in DDR analysis tools (mine or others) for things that should be brought to users attention about the security state of their solutions. These are not necessarily things that are hard-and-fast "bad", but at least things that are definitely worthy of review. I think this would make a great conversation to have late the second day, to see if we can condense a set of rules out of the discussions/sessions of the previous day or so. I think the results of the discussion would be relevant even for those that don't use analysis tools.

New Posts
  • susan
    Oct 9, 2018

    Running w/ Scissors - Where are we and where should we go?

    by Josh Ormond This will be intended as an open discussion about ways to educate the community, the current state of security in the general community, and some of the misconceptions we need to push back against. How do we get on the same page, as experts interested in helping secure sensitive data and files? How do we distribute that message? Right now, there are too many running with scissors, and don't see any danger in it. Can we as a group do something to raise the message so people get it?
  • susan
    Oct 9, 2018

    Security Threat Matrix - Threats facing FileMaker developers

    by Alan Deffenderfer This session is intended to be a brief introduction to several key security concepts, such as defense in depth, attack surface, separation of duties, network design and, more broadly, risk management, used in the DOD context. It will then become an open discussion about how those concepts might apply to large multi-module, multi-file FileMaker solutions using data separation across multiple sites, connected to disparate data sources (Oracle, for example) for numerous user groups accessing FileMaker through Web Direct, FM Client, iOS, PhP and the Data API.
  • susan
    Oct 9, 2018

    To Store or Not To Store, That Is The Question

    by Chris Irvine A fast paced discussion to examine all the places in the FileMaker universe where passwords can be stored. For each situation, we'll apply a healthy level of business and security scrutiny. Walk away more informed, write smarter solutions, deploy safely, and give good advice to your users/clients. Also, one other thing, just because there wasn't a box for it. For my "storing passwords" concept, I'd really like a co-facilitator that can record audience contributions on a whiteboard or giant pad. I'm not sure if there are people who would like to get some involvement without leading a session of their own. (Plus my handwriting is terrible and I'm a guy so I can't do two things at once.)