Hey, I'm Ryan

We developed a system to detect compromised session cookies, protecting user data from unauthorized access. The approach uses a last access timestamp mechanism to identify cookie theft and employs sophisticated techniques to reduce false positives while maintaining performance at Slack's scale.

Why does sensitive data always seem to end up places it shouldn't? We won't answer that, but we will tell you how we combat the problem. Log Canary probes our product for places where PII might leak into logs, so that we can resolve the issue before real data is written. Join us as we explain the concept and lessons learned in development and deployment.

Come on our journey of creating scalable tooling and processes to automatically identify vulnerabilities in third-party libraries and handle the question of “ok we found this, who’s going to fix it?”