Privacy-First Re-Architecture

QCon San Francisco 2022

Session Security

Privacy-First Re-Architecture

Wednesday Oct 26 / 04:10PM PDT, Ballroom BC

Abstract

The tech industry grew organically the last few decades. We built new innovations on top of old. We evolved systems and technologies to meet new challenges. Decisions of the past became assumptions of today.

But what if we pause to check those assumptions? What if we disentangle the systems and re-architect them with new priorities, such as privacy-first and user-centricity? We’ll explore what that could look like: an alternative architecture and ecosystem, where industry-wide decentralized data ownership is the prime directive. We’ll then dig deeper to see what you can do today with emerging technologies that align with privacy-first design.

Interview

I'm a Principal at Thoughtworks where I support companies through their digital transformations. For example, I provide architecture and agile expertise. As Domain Driven Design says: ‘tackling complexity in the heart of software’. So supporting organizations with what they need to lead in their industries, with technology as a core driver.

It arose from personal frustrations of being a user of technology today. For instance, it’s been a pain to synchronize my calendars across different calendar applications. I have separate calendars for each client organization, for each community group, plus my own personal calendar. As users today, our data is broken and silo-ed within proprietary applications. Not to mention the plethora of data breaches and application outages that we all continue to face, out of our own control.

So I am inspired to share the tools and emerging technologies we have to rearchitect our industry, knowing there are alternatives to centralized servers and organizational silos. In the past, I led the design and implementation of peer to peer technologies where my team overcame technical hurdles and found viable and feasible solutions to these challenges.

In addition to the issues we face as users, there are emerging global privacy and data management laws. Whether in California, EU, Brazil or elsewhere, these laws will require us to rethink how we scale and implement our data and applications. A vision for a future privacy-first architecture emerges when we place users at the center of our technology designs.

The talk is targeted for senior engineers and technical leaders, especially if they are seeking ways to move the industry forward to address privacy and data ownership concerns. Collectively, we can collaborate, unlearn, check our assumptions, and move beyond the status quo.

I would love for people to be reminded that there is an alternative path to our Internet and technology architecture. I would love for them to view today's problems, whether privacy or resiliency or just the plethora of password management issues, from a different perspective. Data ownership can be flipped. We can learn from peer to peer designs from the past, but also from emerging distributed technologies that are coming forth. They will leave the talk with practical forward steps they can take even today in their organizations.

Topics

Security Architecture Decentralized Data Privacy-First Design
76% senior dev or higher
1:11 speaker ratio
60+ practitioners

QCon San Francisco 2022 is a three day conference for senior software engineers, architects and team leads. An international program committee of working engineers selects every session. Patterns and practices, not products and pitches.

Share

From the same track

Wednesday 26 October

10:35 Seacliff ABC Session Security A Big Dashboard of Problems Travis McPeak Founder and CEO @ResourcelyInc, previously @Netflix & @Databricks 11:50 Seacliff ABC Session Security Scaling Defenses Amidst Evolving Threat Landscape Aditi Gupta Staff Security Software Engineer @Netflix 13:40 Bayview Session Security Vulnerability Inbox Zero Alex Smolen Director of Security @LaunchDarkly, previously Engineering Manager @Clever, Engineer @Twitter, Security Consultant @Foundstone 14:55 Seacliff ABC Session Panel: Practical Security Aditi Gupta, Travis McPeak, Nimisha Asthagiri, Alex Smolen 16:10 Ballroom BC Session Security Privacy-First Re-Architecture Nimisha Asthagiri Principal Consultant @Thoughtworks, Previously Chief Architect & Senior Director of Engineering @edX