YouSaid · the spoken record

Jameeka Green Aaron

lines on the record: 83
first: 2023-08-29
most recent: 2023-08-29
sittings or episodes: 1
sources: podcast

Every line below is reproduced as it was said and linked to the record it came from. Nothing here is summarised or generated. Directory · Search · Corrections

“This is where ACTA is, it becomes super important. We do this for you. Essentially, when you think, let's put the keys back in the phrase of passwords. We are going to help you manage this so that you don't have to do it yourself. And Okta works with tons of startups. We have AuthZero for startups. We have free versions for small businesses. And this is really, honestly, a big part of what I've been doing these last couple of years is talking to small businesses, talking to our NGOs, talking to spaces where they don't think they need to do identity management because they're not big enough for that. There's no size. If you have one employee, you should be thinking about this. If you have 10, you should be thinking about this. And so Octa's coming in and saying, don't try to do this yourself. Don't try to do identity yourself. Let us build it for you, whether that's workforce identity with multi-factor authentication and single sign-on and FastPass, which allows you to go passwordless, or it's on the customer identity side where we're saying you.”
2023-08-29 · Decoder with Nilay Patel · Biometrics? Bring it on: Why Okta’s Jameeka Green Aaron wants passwords to go away · IDENTIFIED FROM THE TRANSCRIPT
“All have keys Let's say I'm a small business owner. I'm small startup making a piece of software. I'm like, look, I need a secure login. I'm going to hire Okta. Does Okta come in and say we're also going to audit your key management and your software? Or do you come in and say, we're going to do this for you?”
2023-08-29 · Decoder with Nilay Patel · Biometrics? Bring it on: Why Okta’s Jameeka Green Aaron wants passwords to go away · IDENTIFIED FROM THE TRANSCRIPT
“They'll end up with old keys and they'll go and they'll start unlocking doors. And when they do that, they have full access to your environment depending on what those keys do.”
2023-08-29 · Decoder with Nilay Patel · Biometrics? Bring it on: Why Okta’s Jameeka Green Aaron wants passwords to go away · IDENTIFIED FROM THE TRANSCRIPT
“Backdoor, side door, and 42 windows, they all have keys to them, and they all have different keys. And essentially, we will, in many cases, we will build our software to have those keys as a part of the software. So they're hard-coded into the software. We have to rotate them sometimes because we get broken into. They expire. You change neighborhoods or you change doors and you rotate keys. Essentially, when that key is compromised or someone who isn't supposed to have that key now has it, they can open all the doors. That's the problem space that we're in now. Key rotation is another big part of the key management process. And so in many cases, keys live in your software for a very long time or forever. And you have to go and find them and rotate them. And so that's the other part of the space. You need to rotate your keys and you need to manage your keychain. If you do neither, someone else will end up with your keys. They'll end up with your keychain.”
2023-08-29 · Decoder with Nilay Patel · Biometrics? Bring it on: Why Okta’s Jameeka Green Aaron wants passwords to go away · IDENTIFIED FROM THE TRANSCRIPT
“A key is essentially a password that a machine uses. When systems are talking to each other, there is a need to protect the information and the data and also to verify or authenticate that the information the data is coming from trusted sources. So when you think about a key, a key is essentially a password that a machine or that an API might use to verify that it is who it says it is and it does what it's supposed to do. And that's the really simple short version of what it is. We use them all the time as our systems talk or our containers talk to each other or as they're passing data, there's a key that happens or that is exchanged in the process of that conversation. In many cases there's key pairs, there's one key, there's a public key, there's a private key. There are all kinds of keys that look like that but essentially they're passwords. They are a key to a door. You have a front door. It has a key to it. We have a front door.”
2023-08-29 · Decoder with Nilay Patel · Biometrics? Bring it on: Why Okta’s Jameeka Green Aaron wants passwords to go away · IDENTIFIED FROM THE TRANSCRIPT
“They're using a real credential that belongs to you. It is yours, and now it is out there in the wild, wild west. And so this is a big deal. And it is unfortunate, but it's going to keep happening until we actually start to practice secure by design.”
2023-08-29 · Decoder with Nilay Patel · Biometrics? Bring it on: Why Okta’s Jameeka Green Aaron wants passwords to go away · IDENTIFIED FROM THE TRANSCRIPT
“When I look at some of what's happening just in general in this space, key management is a challenge for everyone. Every company, every CISO that I talk to, key management is a huge challenge. Didn't take that into account. And so this is where Secure By Design becomes critical because you build key management into your stack. And then it's always managed. And I think it's one that we struggle with. It's one that we're going to continue to struggle with. One of my people put it this way. It's an arms race. It is. This is one that we're going to have to get after because the ability to pick up our keys, especially when they're hard coded. When a hacker gets a hold of them, they have the keys to the key. They can get in and you won't be able to detect them. Because they're using the reality.”
2023-08-29 · Decoder with Nilay Patel · Biometrics? Bring it on: Why Okta’s Jameeka Green Aaron wants passwords to go away · IDENTIFIED FROM THE TRANSCRIPT
“Great threat modeling. It allows you to look at our data, integrate our data and our threat intelligence into your model. So we're wide open. We're saying, hey, use whatever you would like, but also use multi-factor authentication. Use phishing resistant factors. Like really make sure that you're building an ecosystem that is secure. We're not necessarily saying choose a product. But if I had to say choose a product, says, hey, choose us.”
2023-08-29 · Decoder with Nilay Patel · Biometrics? Bring it on: Why Okta’s Jameeka Green Aaron wants passwords to go away · IDENTIFIED FROM THE TRANSCRIPT
“Here, I would say that we offer more options available to you. We're not trying to put you in the Okta ecosystem. We're saying figure out what ecosystem works best for you. And Okta will work with that ecosystem. And it doesn't matter what company you are. And we're pushing very heavily on our partners to really create this space where it's frictionless for the users because once the users start abandoning our processes, it doesn't matter how secure you are. If the user abandons the process, you're going to get hit with an attack. And so, and again, because we are aware that identity-based attacks are number one, we're thinking about that because we're there. We're the identity provider for so many. I don't think of it in terms of who the competitors are, what we do better. I think of it in terms of our neutrality makes us strong because it allows you to think about your theme and your source systems. It allows you to into”
2023-08-29 · Decoder with Nilay Patel · Biometrics? Bring it on: Why Okta’s Jameeka Green Aaron wants passwords to go away · IDENTIFIED FROM THE TRANSCRIPT
“I am a firm believer in not trashing other companies because your day's coming. And that's me the CISO speaking. I'm like, listen, everyone has their day on the front page of the Wall Street Journal. And so we've had our day as well. And so I think that that's something that I just tried not to do. What I will say is that we work with Microsoft. We work with Amazon. We work with all of these companies in various capacities, either because we're users of them also, but also because we're neutral. And so our goal is not necessarily to put other companies out of business. Our goal is to make the best experience for our customers. And so when we think about workforce identity, we're not just multi-factor authentication. We're single sign-on. We have partnerships. We have 15,000 partnerships and connections to various partners to allow you to do your work securely. And so I wouldn't say that we are better than them in the capacity of, we're more secure.”
2023-08-29 · Decoder with Nilay Patel · Biometrics? Bring it on: Why Okta’s Jameeka Green Aaron wants passwords to go away · IDENTIFIED FROM THE TRANSCRIPT
“Not going to put out the Octa internet appliance that I can install in my small business tech office. Microsoft is a huge competitor in many ways, right? They are on-prem. They've had active directory for what seems like a billion years. For one minute, it seems like a monopoly provider of identity services to big companies. They're under fire right now. We had Adam Slipsky from AWS on the show. He's like Microsoft Security Practices are horrible. He wouldn't say their name, but he was like that company that starts with name. Other cloud providers are saying Microsoft has problems. They just had a breach. Is your pitch Fundamentally, the cloud is more secure, or is it we're more secure than those guys?”
2023-08-29 · Decoder with Nilay Patel · Biometrics? Bring it on: Why Okta’s Jameeka Green Aaron wants passwords to go away · IDENTIFIED FROM THE TRANSCRIPT
“We have no competitors. Yeah, sure. I'm just kidding. I mean, of course, Microsoft, Ping, one login, those are some of the ones that come up pretty frequently. I think what's unique about Okta is that we are a cloud identity company, and that's what we do. That is our space. And we are, again, powered by neutrality. But we are not an on-prem company. That's not what we do. That's not in the stars for us. And we're really focused on the cloud identity space. And so that's why when I said, hey, we're building the identity cloud of the future. That's the space that we're ferociously focused on. There are not other lanes that we're trying to get into.”
2023-08-29 · Decoder with Nilay Patel · Biometrics? Bring it on: Why Okta’s Jameeka Green Aaron wants passwords to go away · IDENTIFIED FROM THE TRANSCRIPT
“Attacks are still the number one attack, and they are effective. And so I don't think it's a good idea to have that data sitting in any one space, but I do think that the opportunity for partnership sits there for us to look at spaces and databases and really connect and figure out how do we keep those safe while also having the ability to transfer information and share information.”
2023-08-29 · Decoder with Nilay Patel · Biometrics? Bring it on: Why Okta’s Jameeka Green Aaron wants passwords to go away · IDENTIFIED FROM THE TRANSCRIPT
“Yeah, I never think that it's the best thing to do to trust one place to do everything because hackers know that and they are good at what they do. And no, I don't think that you should just trust Okta. I think that the technology that we're building and what we're thinking about, you should trust the ideas that we have and the perspective that we have on the identity space. I don't think that that database will be sitting solely with Okta. I think it will be decentralized. But what I do think is that when I talk about public-private partnership, I do think there's an opportunity to say for Okta to say, hey, you know, US passport agency, we would like the opportunity to partner with you on digital identities and how we create the next space for digital identities. So I don't think that it's a good idea to have any amount of data for specifically PII data because ultimately identity-based.”
2023-08-29 · Decoder with Nilay Patel · Biometrics? Bring it on: Why Okta’s Jameeka Green Aaron wants passwords to go away · IDENTIFIED FROM THE TRANSCRIPT
“It's nil, right? But that's what it's going to take, right? It's going to take that level of unification, not just across states, but across companies. And one of the things that we kind of pride ourselves on is neutrality. We've decided that we're not going to pick. We're going to work across many platforms, across various platforms, thousands of partners, thousands of ways that we're connecting different infrastructures. That is what Okta is trying to do. Our goal is neutrality. us choosing neutrality in some cases everyone wants you to pick a side and i think we have we picked the side of neutrality and the side of our customers and our consumers on the flip side of that is not just workforce identity my job is actually”
2023-08-29 · Decoder with Nilay Patel · Biometrics? Bring it on: Why Okta’s Jameeka Green Aaron wants passwords to go away · IDENTIFIED FROM THE TRANSCRIPT
“Number one, I think public partnership is going to be critical to that. I think that, and that's not something that we're totally good at yet. The fact that we have state drivers' license tells us that we're not good at unifying the identity space just yet. We totally have the capability to just have a driver's license, right? Yeah.”
2023-08-29 · Decoder with Nilay Patel · Biometrics? Bring it on: Why Okta’s Jameeka Green Aaron wants passwords to go away · IDENTIFIED FROM THE TRANSCRIPT
“If I'm buying a drink and all you need is my name and am I old enough to drink, then all I'm sending you is my name potentially, or maybe not even that. Maybe I'm just sending you information that I'm old enough to drink and yes, you can serve this to me. And so I think when we think about the larger role of digital identities, it's really one where the consumer decides. And that's, I think, what's important to Okta. We're thinking about how do we put this back into the consumer's hands and give them choice while also keeping them safe.”
2023-08-29 · Decoder with Nilay Patel · Biometrics? Bring it on: Why Okta’s Jameeka Green Aaron wants passwords to go away · IDENTIFIED FROM THE TRANSCRIPT
“And so I think that when I think about the future of digital identity, I'm transmitting my name and the fact that I have a valid driver's license over to a police officer in a wireless way. And that's all they really need to verify at that point is she's who she says she is her photo and she has a valid driver's license. I think that's the future of identity. And I also think that that allows the consumer the ability to control what data is provided and where. And when you think about digital identity, that to me is what we should be thinking about. Right now, we don't have a lot of control over the information that we provide to anyone. If you go through the airport and they scan your driver's license or your passport, you don't actually really know what information is being garnered in that particular case. The future of my digital identity is one that consumer controls, where the consumer decides which information is actually needed and do I want to provide that information.”
2023-08-29 · Decoder with Nilay Patel · Biometrics? Bring it on: Why Okta’s Jameeka Green Aaron wants passwords to go away · IDENTIFIED FROM THE TRANSCRIPT
“Expect that when we think about the future of digital identity, I don't think people are quite ready to part with anything physical. And that's fair. There's the physical identities that we have, but then there's our ability to transmit that identity to those who need it for specific reasons. And I think it goes beyond that, right? It's not just transmit my identity, everything on it, my name, my address, my Social Security number. It's, hey, in this particular case, all you need to know is my name and if I have a valid driver's license.”
2023-08-29 · Decoder with Nilay Patel · Biometrics? Bring it on: Why Okta’s Jameeka Green Aaron wants passwords to go away · IDENTIFIED FROM THE TRANSCRIPT
“Yeah, I think though in my mind, when I think about a digital identity, I would not want to hand my phone to a copy. So I agree with you there. I agree with that sense of it. But at the same time, you know, we don't hand our credit cards over now when we pay, when we swipe to pay. And so in I think about just me, Jamika, the future of digital identity, I'm pulled over and I'm in my car. I'm driving my car. Let's give that example. And my driver's license is not only tied to my registration in my car. So when I'm pulled over and my license plates is run, there's information that's given to a police officer that says, this is Jamika's errand's car, and this is her driver's license, and this is what she looks like. And so when they see me, they go, oh, we already have some of her information, or we're using technologies like NFZ to actually transmit that information over to them. So I don't expect to hand over anything else anymore, essentially.”
2023-08-29 · Decoder with Nilay Patel · Biometrics? Bring it on: Why Okta’s Jameeka Green Aaron wants passwords to go away · IDENTIFIED FROM THE TRANSCRIPT
“Scanned into digital platforms and verified that way. But ultimately, we want this to be a seamless process where who you are in real life and you're a digital identity align and they are both protected. And so Okta has the problem space of trying to innovate in a way that we can protect both of those identities at the same time.”
2023-08-29 · Decoder with Nilay Patel · Biometrics? Bring it on: Why Okta’s Jameeka Green Aaron wants passwords to go away · IDENTIFIED FROM THE TRANSCRIPT
“After the business, no, I think we have a perspective at the digital identity is important. From that perspective, when we think about digital identities, we want you to own your actual digital identity. I think that's the most important thing when we think about people in technology. I want Nile to own all the versions of Nile on the internet. And I want the threat actors not to own any of those versions. And so when we think about our trajectory as a cloud identity company or as a primary cloud for identity, we are thinking about how can we make it so that wherever you are, you actually own your true identity. And that's a really big problem space and it's hard because you have to think about passports, about driver's license and things that you physically hold that also can eventually relay into your digital identity. We're seeing some of that interplay now, right? You see your physical identities be.”
2023-08-29 · Decoder with Nilay Patel · Biometrics? Bring it on: Why Okta’s Jameeka Green Aaron wants passwords to go away · IDENTIFIED FROM THE TRANSCRIPT
“Yeah, I want to talk about Paskis in particular. That seems like a big trend that's coming, and Apple and Google are into it. Microsoft's into it. But I want to say focused on Oxfa for just a second here. When you think about that problem space, we want to make identity and logging in better. That's a big problem, right? And it ties into a bunch of social factors. It ties into how people want to use the internet. It ties into the very notion of whether you should be the same person everywhere on the internet or different versions of yourself on different platforms. Does Okta have a view there or are you more, okay, where for you at work? We're for you when you interact with the business.”
2023-08-29 · Decoder with Nilay Patel · Biometrics? Bring it on: Why Okta’s Jameeka Green Aaron wants passwords to go away · IDENTIFIED FROM THE TRANSCRIPT
“Ingrained into society. As long as we've known computers, we've known there's a username and password. And we're now saying, hey, let's move beyond that.”
2023-08-29 · Decoder with Nilay Patel · Biometrics? Bring it on: Why Okta’s Jameeka Green Aaron wants passwords to go away · IDENTIFIED FROM THE TRANSCRIPT
“Well, that's where it begins for us. We absolutely are trying to go beyond that because I think to take your example, when you log into a bank, you don't just log in. You log in and you're prompted for additional factors, so multi-factor authentication. So you're prompted either with a one-time pin, a password, additional password, you're prompted with a social login or some other way to verify you. And so we are not just the login box. We're not just securing the login box. We're trying to blend the user experience into the login box. So there's that. I think there are other new technologies that are coming out and that are changing that are also going to change what we do. Like the way we protect personally identifiable information. And so we are now a part of that as well. And so I wouldn't say that that's where we end. I'd say we are the beginning of the process. We're trying to change the way people think about passwords and the way they think about how they log in. And that's hard because the password is deeply.”
2023-08-29 · Decoder with Nilay Patel · Biometrics? Bring it on: Why Okta’s Jameeka Green Aaron wants passwords to go away · IDENTIFIED FROM THE TRANSCRIPT
“Think of web applications. I really think of all computer stuff as a series of modules, right? So I log into a bank, they need a database vendor and a web design company, and you're saying even through that, even through just logging in, you're the vendor that supplies secure logging into a bunch of people that need secure login, and then you can go and use your application. Is that where it ends for you, or are you trying to go beyond that?”
2023-08-29 · Decoder with Nilay Patel · Biometrics? Bring it on: Why Okta’s Jameeka Green Aaron wants passwords to go away · IDENTIFIED FROM THE TRANSCRIPT
“Your banking application, or when you go to a baseball stadium, you are also interacting with the login process of Okta. That's what we do.”
2023-08-29 · Decoder with Nilay Patel · Biometrics? Bring it on: Why Okta’s Jameeka Green Aaron wants passwords to go away · IDENTIFIED FROM THE TRANSCRIPT
“So, Okta, as a business, we're about people, right? We're a technology company that's about people. Our goal is to enable everyone to safely log in anywhere they want to log in, essentially, safely use the internet and log in. And so when we think about what Okta really is, we're just a login box. In layman's terms, we're the login box. And we have, we're building a primary cloud for identity. Well, what does that really mean? Like, what is a primary cloud? So Salesforce is a primary cloud for CRM or Workday is a primary cloud for HR. We are building a primary cloud using workforce identity and customer identity for identity. And so that's what we're trying to do or that's what we're doing at Okta. And we touch people everywhere that they are. So yes, you see them at work, but what people don't realize is that you also interact with us on the consumer side when you're logging in.”
2023-08-29 · Decoder with Nilay Patel · Biometrics? Bring it on: Why Okta’s Jameeka Green Aaron wants passwords to go away · IDENTIFIED FROM THE TRANSCRIPT
“You for having me. This is cool. I've been listening and following you for a while, and you're a good interviewer. So I hope take it a little easy on me.”
2023-08-29 · Decoder with Nilay Patel · Biometrics? Bring it on: Why Okta’s Jameeka Green Aaron wants passwords to go away · IDENTIFIED FROM THE TRANSCRIPT
“Information. That means the data that's unique to you, like your name or your social security number, as opposed to more aggregate data, like what kinds of phones are accessing the system. PII being compromised is the stuff that security breaches are made of. This episode's pretty wonky, but I had a lot of fun talking to Jamika right up until she made fun of my iMac. Okay, Jamika Green Aaron, chief information security officer of customer identity at Okta. Here we go. Shamika Green Aaron, you are the chief information security officer customer identity at Okta. Welcome to Decoder.”
2023-08-29 · Decoder with Nilay Patel · Biometrics? Bring it on: Why Okta’s Jameeka Green Aaron wants passwords to go away · IDENTIFIED FROM THE TRANSCRIPT
“Few notes before we start, Jamika and I talked about something called pass keys quite a bit. Passkeys are something that big companies like Apple, Google, and Microsoft are all signed on to as a biometric replacement for passwords. It's an industry standard. We'll put links in the show notes to Verge Stories explaining it all, but the basic idea is that you can sign into all of your accounts using your fingerprint or face ID instead of a password. Google already supports it, Microsoft is testing it, Windows 11, and Apple will soon support it with the release of iOS 17 and macOS Sonoma. Jamik and I also talked about the idea of keys and key management in general. At the most basic level, a key is what allows computers access to various systems. But once you have a big database with lots of users and complicated APIs, managing all of those keys becomes a big problem that affects everyone. And that's really very much the business that Okta is in. Lastly, you'll hear us refer to PII, which stands for Personally Identifiable”
2023-08-29 · Decoder with Nilay Patel · Biometrics? Bring it on: Why Okta’s Jameeka Green Aaron wants passwords to go away · IDENTIFIED FROM THE TRANSCRIPT
“Of the internet in 2023, and how it relates to all the different technologies, tools, and systems we encounter as we go about our business online. And most importantly, how do you keep all of that secure? We also talked about what identity means in the offline world that some people might call the real world, and why that matters for the rest of us. There's a big push to tie our real world identities to our digital devices. And Jamika and I talked about the pros and cons of those ideas. I'm also getting ready to host the Code Conference in September, and AI is absolutely at the top of my mind. Cybersecurity is a big issue. Jamika told us that one of her real concerns about this new wave of AI tools is that they can move faster and they can disrupt security at the level of identity, making it harder to tell, well, who's real. We can move a lot of identity to biometrics, but if AI can break biometric security systems, well, there's really no going back.”
2023-08-29 · Decoder with Nilay Patel · Biometrics? Bring it on: Why Okta’s Jameeka Green Aaron wants passwords to go away · IDENTIFIED FROM THE TRANSCRIPT
“Hello and welcome to Decoder. I'm Neil Apatella, editor in chief of the Virgin Decoder is my show about big ideas, other problems. Today I'm talking to Jamika Green Aaron. She's the chief information security officer of customer identity at Okta. Now Okta is a big company. It's a Wall Street software as a service darling. And it's also just the thing a lot of us have to log into at work 50 times a week to get anything done. So I was very curious to dig into the business of Okta's business. What does this company actually selling beyond just a login screen? Jamaica told me that OCTA's point of view is that it's not just a security company. It's an identity company. So we talked a lot about the whole concept of identity and what that means in terms of computers in 2023. Is it your whole actual self? Is it a digital replica of your vital stats and permissions? Is it just what you need to log into at work? How does anyone define what it means to be a user?”
2023-08-29 · Decoder with Nilay Patel · Biometrics? Bring it on: Why Okta’s Jameeka Green Aaron wants passwords to go away · IDENTIFIED FROM THE TRANSCRIPT