Brought to you by Meta. In addition to remaining active in the open source community and conference circuit, this podcast offers another channel that allows us to highlight the technical work of our engineers who will discuss everything from low-level frameworks to end-user features. Throughout the podcast, Meta engineer Pascal Hartig (@passy) will interview developers in the company.
50: De-identified authentication at scale
If you hear privacy and your first thought is laborious processes and access management, this interview may be just as mind-expanding for you as it was for our host Pascal. He is joined by Alex and Haozhi who talk about the Anonymous Credential Service (ACS), a highly available multitenant service that allows clients to authenticate in a de-identified manner. They discuss the cryptographic primitives powering the service and the various challenges they encountered scaling it to support Meta's products.
Got feedback? Send it to us on Twitter (https://twitter.com/metatechpod), Instagram (https://instagram.com/metatechpod) and don’t forget to follow our host @passy (https://twitter.com/passy and https://mastodon.social/@passy). Fancy working with us? Check out https://www.metacareers.com/.
Links
-
How Meta enables de-identified authentication at scale - https://engineering.fb.com/2022/03/30/security/de-identified-authentication-at-scale/
-
Open-sourcing Anonymous Credential Service - https://engineering.fb.com/2022/12/12/security/anonymous-credential-service-acs-open-source/
-
ACS on GitHub - https://github.com/facebookresearch/acs
-
ReactJS - The Documentary - https://www.youtube.com/watch?v=8pDqJVdNa44
Timestamps
-
Intro 0:12
-
Alex and Haozhi Intro 1:22
-
Cryptography and Privacy 2:47
-
Team Mission 3:35
-
Data Minimisation 4:28
-
PETs 5:13
-
Why authenticate? 8:39
-
ACS under the hood 10:06
-
ACS Architecture 16:02
-
Challenges 21:03
-
ACS in Open Source 26:36
-
Key-Derivation Functions 29:22
-
How to get started 32:10
-
Outro 33:47
-
Bloopers 34:29