50: De-identified authentication at scale

Meta Tech Podcast

Pascal Hartig에서 제공하는 콘텐츠입니다. 에피소드, 그래픽, 팟캐스트 설명을 포함한 모든 팟캐스트 콘텐츠는 Pascal Hartig 또는 해당 팟캐스트 플랫폼 파트너가 직접 업로드하고 제공합니다. 누군가가 귀하의 허락 없이 귀하의 저작물을 사용하고 있다고 생각되는 경우 여기에 설명된 절차를 따르실 수 있습니다 https://ko.player.fm/legal.

1+ y ago 34:45

MP3•에피소드 홈

If you hear privacy and your first thought is laborious processes and access management, this interview may be just as mind-expanding for you as it was for our host Pascal. He is joined by Alex and Haozhi who talk about the Anonymous Credential Service (ACS), a highly available multitenant service that allows clients to authenticate in a de-identified manner. They discuss the cryptographic primitives powering the service and the various challenges they encountered scaling it to support Meta's products.

Got feedback? Send it to us on Twitter (https://twitter.com/metatechpod), Instagram (https://instagram.com/metatechpod) and don’t forget to follow our host @passy (https://twitter.com/passy and https://mastodon.social/@passy). Fancy working with us? Check out https://www.metacareers.com/.

Links

How Meta enables de-identified authentication at scale - https://engineering.fb.com/2022/03/30/security/de-identified-authentication-at-scale/
Open-sourcing Anonymous Credential Service - https://engineering.fb.com/2022/12/12/security/anonymous-credential-service-acs-open-source/
ACS on GitHub - https://github.com/facebookresearch/acs
ReactJS - The Documentary - https://www.youtube.com/watch?v=8pDqJVdNa44

Timestamps

Intro 0:12
Alex and Haozhi Intro 1:22
Cryptography and Privacy 2:47
Team Mission 3:35
Data Minimisation 4:28
PETs 5:13
Why authenticate? 8:39
ACS under the hood 10:06
ACS Architecture 16:02
Challenges 21:03
ACS in Open Source 26:36
Key-Derivation Functions 29:22
How to get started 32:10
Outro 33:47
Bloopers 34:29