thanks so much thank you I have more red
hair than in that picture that you just
saw up there good morning thank you for
inviting me to beautiful sunny London
how surprising so I'm going to provide
you today with a glimpse into the future
of cyber security and privacy as hackers
see it perhaps you'll find some of my
ideas controversial provocative but I'm
giving you an opportunity to consider
them and if you like I think that what
hackers have to suggest could make a
difference a world of difference for the
future of what you have to suggest your
customers partners patients and
everybody that cares about cyber
security and privacy so we're going to
talk about hacking the future and I
understand it might be a little bit
counterintuitive to trust a hacker but I
ask you to give me your trust for this
short time this morning so that I can
walk you through my world the hackers
world and suggest to you this
perspective if you choose to have other
perspectives afterwards that's
absolutely fine and I understand but
it's my job to give you an idea of the
hackers world so let's jump right in
there to talk about the future I'll
begin with the past about 20 years ago
about the same time that I first got
interested in digital security and the
online world this gentleman Nicholas
Negroponte a from the MIT Media Lab in
the United States provided his vision
for a digital future in the book which
he called being digital he had a lot of
different predictions in there but I'll
focus on just one prediction mr.
Negroponte I said that he predicts that
pretty soon bits and bytes of
information will control more aspects of
human society and human lives than
physical atoms and molecules sounds a
little bit like science fiction
definitely 20 years ago but that reality
is very soon coming true because as you
all know with connected
devices internet of everything and the
phones you have in your pockets bits and
bytes already matter to a lot of the
aspects of our life and digital
technology has already transformed so
many aspects of our life and it is
enabled fantastic things revolutions
technologies and changes to how we spend
our time online and offline and I'm
referring to some things also enabled by
this new digital world fantastic things
perhaps for some people like specialized
dating services now of course all of you
in this room have never heard about
Ashley medicine you've never used it but
your patience your clients your
customers have so I'm going to go out on
a limb and guess you heard about Ashley
medicine in the past year and its impact
on the on the world but for those few of
you that were living on Mars and had
nothing to do with this website will
give you brief introduction it's a
specialized dating service that allows
married people to meet with other
married people to conduct things that
married people can't do by themselves at
home with their other married partners
this was the most elegant way and the
family friendly way I could use to
describe it of course this company is
not shy about what they do and so their
sales slogan is very simple life is
short have an affair compelling but the
promise the this website brings to the
table is not just of illicit romantic
encounters it's the promise of
discretion anonymity secrecy discretion
guaranteed it's even in the image right
this was their big promise and as we all
knew this promise was broken very
dramatically last year when the team of
hackers decided to leak the entire
contents of the databases of this
company to the world wide web for those
of you I haven't heard about it about
the details of millions of users were
exposed including addresses and credit
card details and names and a few things
were discovered from this bridge number
one about 99% of the users the
registered users on the website were men
and the the remaining 1% were either
chat BOTS fake profiles or female
profiles create
by the owners of the website to try and
give the impression that women are
actually using this website so perhaps
that some good news of course there was
some other bad news for the people who
whose details were practically exposed
now you all heard about this story but i
wanna i want to ask you one quick
question have you considered why why did
the hackers calling themselves the
impact theme even decide to take down
this website in such a dramatic manner
all kinds of manifestos have come out
from this team the impact team that's
what they call themselves and they said
different things and i don't think it's
about protecting the sanctity of
marriage and no they don't work for the
Pope I don't think so but but here's one
interesting thing that I discovered when
I looked into the reasons the
motivations why were these hackers so
keen on exposing this website's very
poor privacy and security protections
here's why it's because of this Ashley
medicine had a feature in their service
called ghost erase and this feature was
a promise to their customers that if
they ever want to leave the website if
they ever want to stop doing whatever it
is they were doing and want to erase all
trace of ever using this website no
problem at all just pay us twenty
dollars and I think the hacker the
hackers took issue with this because if
Ashley medicine asks for people to pay
to be removed from the part from from
the platform who is extorting who here
is a very interesting question and so
and I think this detail about the Ashley
Madison story that is never discussed
openly I think it's worthwhile asking
wasn't okay that this company asked for
twenty dollars from people to be removed
wrong product isn't a little bit of a
problem when you can register online for
free discretion guaranteed come join the
fantastic adult derating lifestyle oh
you want to leave no problem twenty
dollars please a little bit of a
difficulty there I think and that's what
the hackers saw as well that's my
perspective at least of course you heard
that information is a commodity it's the
fuel running our future if information
is a commodity then they DS and
gentlemen I would like to offer you that
the hackers perspective is that try
see is a privilege it is not necessarily
a god-given right it is a privilege for
which people must pay with either their
time their effort in trying to set up
encryption or avoiding services like
Google Facebook etc that use your
information and give you a valuable
service in return or you pay by using
paid encryption and in premium web sites
and services or you pay with your time
and effort by staying off the grid
either way if you would like to have
privacy in the future hackers know that
this is a privilege that you have to
work hard for and hackers have always
known this this has always been my
perspective to me it's not new to
hackers it's not new at all companies
like Sony Pictures Entertainment that
who were hacked in the past year have
all also discovered the power of letting
the entire world see their information
and what that difference that can make
of course you all heard about the sony
pictures entertainment hack why were
they hacked because the North Koreans
this dislike their taste in dramatic
Hollywood narratives as you can imagine
i'm also not that keen on that
explanation i think there was a much
more nuanced much more complex story in
the background but here's why it matters
to you in the sony pictures
entertainment hack which by the way
created a lot of media buzz for a pretty
mediocre movie i think you would all
agree that we all heard about this movie
without watching it because of the hack
which makes me think that the North
Koreans didn't really hacked Sony to
prevent you from going to the movie but
something else happened the emails and
the entire correspondence of sony
pictures entertainment one of the
leading hollywood studios in the world
were all leaked online this sounds like
terrible news for people in your
profession but for people like shirley's
her own in the acting profession it was
actually some piece of good news in the
skies because sure least her own
fantastic actress she discovered in
these emails that were leaked that as a
female leading actress in her next
upcoming hollywood picture she wasn't
getting the same pay as the male
counterpart actor who was actually less
well-known less famous than she so she
actually used this information
to leverage equal pay for Hollywood
actresses everywhere fantastic news if
you're a Hollywood actress what's the
takeaway what's the takeaway for you and
me I think the takeaway from just these
two stories the dating industry actually
medicine and sony pictures entertainment
data preachers data breaches are
impacting all kinds of industries your
customers might be in the car business
they might be in the medical device
business they might be in the dating
business they might be in the coffee
shop business that the breaches will
have something to do with how they
conduct their business in the next few
years that's a guarantee maybe if your
Prime Minister or leading politician
data breaches are going to impact your
future and your career perhaps you've
all heard about the Panama leaks at this
point massive data breach from about two
weeks ago Prime Minister's losing their
jobs politicians facing protests because
the power of information is changing the
course of humanity sounds like a really
dramatic statement but it's true it's
absolutely true these data breaches are
making a difference for everyone hackers
know what the power of information is we
know how much we have to work hard if
you want to have privacy and security
and we know that privacy and security
are not ultimate destinations you don't
just get to someplace and that's it now
you're secure or your information is
private it's an ongoing journey it's a
struggle sometimes it's an effort and
this is I think why a lot of people fear
hackers hackers good and bad they remind
everyone they remind you when they
remind everyone out there just how
fragile this illusion of privacy and
security that we all rely on every day
to conduct our business so it makes us
fear hackers but we shouldn't throw away
the baby with the bathwater hackers have
some really good ideas one of them is
that privacy access and trust are
constantly shifting currencies of power
just like information is a commodity and
hackers realized that security and
privacy something you have to work for
it's not a god-given right if you don't
configure your servers if you don't
deploying encryption if you don't take
the time and effort to introduce
security and privacy into everything
that you
do you won't have it this is something
hackers know very well I learned this
lesson from another Hollywood actress
surprising as it might seem perhaps you
know her angelina jolie about 20 years
ago when i was first getting interested
in a hacker's world i saw a film from
1995 hackers anyone seen this movie here
i think it's a classic for those of you
who haven't please watch it fantastic
examples of how hackers can completely
ruin an FBI directors life but also do a
lot of fantastic things when I saw this
film and I was about 14 at a time 20
years ago I realized that all of this
stuff that I was doing taking apart my
computer and overclocking the cpu to
make it go faster that's kind of like a
geeks version of souping up your car in
the garage or trying to find all kinds
of web servers on the internet which was
a new thing for me in 95 finding these
web servers and getting past security
controls getting into hidden folders
trying to set up my own website using
HTML and pirated videos of the prodigy
yes I did do that well it was being it's
called being a hacker it's a thing that
people do it's a whole community of
hackers and Angelina Jolie is doing it
why shouldn't I I realized this was my
calling in life and very happy to say
thank you Miss Julie you saved me
because if I'm being completely honest
in the interest of transparency this is
pretty much how I looked like about 20
years ago a little bit more than 20
years ago now some of you sitting in the
front rows have now fun trying to
identify me in this picture any guesses
by the way I'll give you a spoiler any
guesses over here perhaps give you a
spoiler I didn't have the same hairstyle
so a lot of people are constantly
looking at you know there were a lot of
ladies with girls with fringes and bags
it's not me that's not me that's not me
that's not me so I did go to school that
day it's not a trick question but here
here's the honest-to-god truth that's me
and I was so much of a dork or nerd I
guess I looked like a little boy I would
go nowhere without my state-of-the-art
1993 Sony Walkman gadgets compute
were my best friend's gadgets were my
best friends some of them still are so I
really needed that signal from Angelina
Jolie to give me a meaning and a calling
for what I wanted to do with my life
which was called being a hacker I just
didn't realize it before I saw that film
since then thankfully Thank You mr. Lee
I've had a lovely career working with
some big companies you may have heard of
in some big Israeli government agencies
and technology companies then all
through my career working with these
organizations for more than a decade now
I've always tried to bring the hackers
perspective and I know the hackers
perspective is still you know when I
talk about hackers this is what you
think about this is what you see
remember I'm giving you a choice today
to change your mind I think hackers are
part of the immune system for the
technology age we need hackers they're a
crucial part a vital part of everybody's
future that's my perspective feel free
to disregard it but hackers will make a
difference for your future good and bad
so it's best not to ignore them it's
best not to ignore us better so that's
the choice this morning ladies and
gentlemen take it at your own risk but
I'm happy to give you more ideas more
good reasons why you should care about
what hackers have to bring to the table
and this is one really good reason I
think cyber security and privacy and the
future of our digital life does not
depend solely on secrets secrets are not
the only thing hackers care about in
fact there are one thing most hackers do
not necessarily care about anymore cyber
security in the future of privacy in my
personal opinion is going to be about
protecting our digital connected way of
life sometimes it could be very very
intimate for example if you happen to be
a diabetic patient and your life depends
on an embedded insulin insulin pump that
constantly monitors your blood sugar
levels and your insulin and administers
the correct amount of insulin as needed
all the time I hope you're not diabetic
patients but if you are you know that
these devices have been vastly improving
the lives of diabetic patients all
around the world this is a great piece
of technology unfortunately just like
the other new digital technology it can
be hacked by malicious hackers
thankfully good hackers like Barnaby
Jack one of my personal heroes are out
there to demonstrate the threats so that
we can spark a solution this is
something Barnaby Jack for you said four
years ago when he demonstrated using a
radio antenna to remotely send a signal
to such an insulin pump a signal that
directs the pump to completely dump any
remaining insulin into a patient's
bloodstream he never hurt a soul he
conducted this demonstration on a
see-through mannequin as you can see the
reason this attack was even possible was
because the medical device was not
authenticating the identity of the
transmitter sending those radio signals
because the company that makes these
medical devices never thought that
they're also a cyber security company
and I never thought about employing a
hackers perspective but they do so now
and in fact in the United States the FDA
now has guidelines and suggestions for
medical device companies to work with
hackers and learn from hacking
techniques so that they can prepare for
the future another example may be
something that more of you can relate to
these are some of my other hacker
friends Chris and Charlie you might have
heard about them in the news recently
because they have a very specific hobby
can you guess what their hobby is G
packing thank you very much yes I also
heart crypto if that's what's on your
laptop yes very much so you are correct
sir Charlie and Chris are into Jeep
hacking not just jeeps they've been
hacking all kinds of cars in the past
five years they've been trying to find
the most hackable cars out there and put
the information in the world so that
people can make a conscious decision and
so that automakers can make a difference
to their product because this is life
and death stuff it's not about secrets
they use their cellular signal to take
this Jeep off the road if you'd like to
see a demonstration the video is
available they conducted this
demonstration to a reporter from wired
the magazine wired and they used
remotely so they were not in the car or
nowhere near the car when they took it
off the road they also killed the engine
turned on the wipers and blasted the
music but this was probably the most
dramatic impact however nobody was hurt
in fact this attack on the jeep cherokee
2015 model led to a massive recall of
vehicles in the united states a recall
that allowed the company to fix the
problem now any guesses how the company
fixed this problem and i should say our
prizes so if you answer my questions
there are prizes okay or at least one
prize yes how do they fix the problem
and they did not cut the wireless
connection this was by the way not a
wireless connection but rather a
cellular a signal a lot of cars in the
united states now have studied our
technologies built in GM has OnStar
other car companies have other
technology so it was not cutting the
wireless or cellular connection other
guesses yes over there yes that is
absolutely correct so thank you sir and
you do win an award I which you will get
at the end at the solution the company
had further customers was to send people
in the post a thumb drive with a
software update for their car this is
going to be our connected future
software updates for our vehicles which
we have to implicitly trust where there
is no way for the person who owns the
vehicle to know what's in the software
update what they are agreeing to now
perhaps this new software now tracks
their location identifies what's their
favorite Starbucks branch for example or
any other kind of personal preference so
that's the future software updates for
your cars of course some people get to
the office in something nicer than a
Jeep Cherokee perhaps an 80 million
dollar super act so this is a super yak
the White Rose of the Adriatic as you
can already guess what I'm getting it
this fantastic craft is also susceptible
to attacks remote attacks specifically
using a spoofed GPS signal GPS the
global positioning system the satellite
navigation system we all
lie on military aircraft relies on naval
vessels rely on the same signal system
generally speaking and the the
researchers from the University of
Austin in Texas were able to simply send
this boat a spoofed GPS signal that
would take it a few degrees of course
once again because the boat does not
verify the identity of where it is
getting this signal from it is
sufficient that the signal is strong
enough and stronger than the one
received from the legitimate satellites
to take the vehicle of course this is
this was already demonstrated three
years ago in case you think this is a
science fiction or our future forward
technologies okay what about webcams
some of you have webcams perhaps in your
homes or offices your customers premises
and you are told by the previous speaker
that hackers and criminals will get into
these webcams so that they can look at
you I have news for you you are not
interesting to look at I have looked
through many webcams I've read a lot of
people's emails they are most always
boring this is why criminals hack into
webcams because these webcams are always
on they have high bandwidth connections
to the Internet they can be used to
attack other people's computers other
people's servers other people's devices
this is what it is Rayleigh security
company discovered in their own backyard
a botnet that means an infected network
of webcams that was being used to attack
servers all over the world now let's say
you have nothing to hide or your
customers have nothing to hide their
happy to have people look through the
web cams all day long transparency as a
value that's great what about preventing
people from using their devices to
attack other people's coffee machines
web servers connected cars this is going
to be part of our connected future I
have another question for you anyone can
tell me what this is there are hints in
the picture what's that it's the
internet you say well thank you you are
almost accurate this is an image of
websites and web servers so I think by
this point you all understand that the
web and the Internet are two and kind of
different things so the web is something
that we browse and that we experience
online but the internet is much broader
it includes web cams it includes
connected coffee machines it includes
databases and organizational networks
that are not visible on the web the
World Wide Web this is an image from the
web you are correct about that but it is
from about 10 years ago fairly we know
not organized but a fairly
understandable ecosystem for about 10
years ago if I try to show you an image
of the internet right now the Internet
including the world wide web and
including all of the connected devices
that are potentially on it it would look
more like our galaxy the Milky Way and
it would have disparate planets and dark
spots where we don't know what's
happening and it will have its own
constellations this is probably more
accurately a depiction of our connected
future and it reads much more than just
the visible world wide web so it would
be easy and terrifying to get lost in
this world thankfully hackers to the
rescue once again this is a fantastic
search engine for internet-connected
devices it is called Shaw done like the
black belt in karate show done dot IO if
you're not yet familiar with this
fantastic tool I recommend signing up
and trying it for free or getting a
enterprise user account it was started
by one hacker from originally from
Austin Texas now he works in San Diego
his name is John Matthew Lee he is known
on Twitter as achillion and he calls
himself an Internet cartographer which i
think is fantastic Jordan is a website
or search engine rather that lets you
browse the connected internet for
devices webcams wind turbines connected
coffee machines if you find them however
it can be used for a lot more than that
so quite recently John discovered that
these devices are not the only thing
responding to his searches online he
also identified about 50 terabytes or
I'm sorry perhaps it was even petabytes
a greater amount of data residing on
vast databases from some of the most
popular database brands such as MongoDB
which you might be familiar with or your
customers are
using John was able to identify that
these databases were absolutely exposed
and speaking to the World Wide Web
responding to requests for information
and he downloaded vast amounts of
information from these databases just to
prove the point he keeps talking about
this it's not just the data stupid but
it's also about the data and I suggest
you take a look at his research findings
online because this is a tool you can
all use in your network environments for
your customers to show them just exposed
they might be so we was on those front
lines of this ecosystem who is with us
in this galaxy good people and bad
people of course but some of us think
that there are good people saving us
fierce cyber warriors at the edges
fending off cyber attacks perhaps they
work for your government perhaps they
work for my government either way
somebody's paying the taxes that pays
their salaries and these chaps or ladies
are protecting us all well again I would
like to suggest think again because even
the world's biggest and most well-funded
security agency the National Security
Agency in the United States is doing a
lot more to harm people's privacy then
you might expect from a security agency
for example in the past few years
they've spent millions of dollars on
software vulnerabilities that means bugs
or exploits that can be used to conduct
espionage and they didn't necessarily
tell the companies or the organizations
involved about their findings rather
they used it for espionage and I
understand that it makes sense from
their point of view so how many of you
heard about the heartbleed SSL
vulnerability last year some of you have
even those of you who haven't heard
about heartbleed which was a
vulnerability in the openssl software
library I can guarantee you personally
guarantee you that you have used SSL in
the past five to ten years everybody
uses ssl Americans users cell of course
but the NSA knew about the problems in
SSL heartbleed they knew about this
vulnerability at least two years before
the rest of the world find out which
means they actively kept American
companies at risk as well for about two
years
so they might be making your job harder
even if they're doing their job
according to what their mandate is
they're making all of our jobs harder
security is not about these edges and
fear cyber warriors at the checkpoints
it's about all of us and it's about the
personal choices that people make when
they install a new app when they provide
their details when they click I agree
and I read and agree the terms of use
which you all know is the biggest lie on
the internet because other the new
people here in the room nobody reads the
terms of use and I would venture a bet
that perhaps even some of you did not
read all of the terms of use of all of
the services you agreed to use online so
it's about the choices we make every day
we are customers or partners we all make
should we keep calm and carry on and
brace for impact brace for more data
breaches brace for no privacy at all I
would suggest to do what hackers are
doing which is understand that security
and privacy take time they take effort
they take strategy they're not going to
happen by the way most of all they
require us to share collaborate and
innovate because the bad guys surely are
doing this that collaborating and
innovating and sharing their knowledge
and their product without any burden at
all so we should do just the same and
this might be again counterintuitive for
you all to encourage your customers to
talk about the data breaches that
happened in their organizations but this
is one of the best ways to make
everybody safer for example how many of
you had had instances of ransomware in
your organization's company's homes
ransomware it's a new nasty very good
thing thank you for being brave and
saying it I don't think there's any
reason to be embarrassed that you've hit
you've been hit by ransomware ransomware
is an extremely popular new type of
malware that will encrypt your computer
and require ransom to release the
decryption key so that you can get your
files back in other words the criminals
that run ransomware campaigns don't care
about their information you don't care
about your details they care that you
care enough to pay them back for the
ransom they care that your customers
will pay enough to pay the one thousand
dollar two-thousand-dollar sometimes
seventeen thousand dollar ransom in some
cases
but by sharing and saying hey we had
this infection we've had this breach
we've had this incident and talking to
other organizations we can prevent the
next one so this is why I actually
encouraged actively encourage companies
and organizations to share details of
what happened to them and they're even
Taylor Swift degrees I hope so perhaps
you heard that Taylor Swift popular
American pop singer in the past year or
two years she already had her own
personal iCloud account hacked some of
her text messages from Apple were
released now again two fantastic things
that I took away from the story number
one Taylor Swift knows that her brand is
family friendly and so in all of our
text messages you will not find anything
incriminating or embarrassing she's
absolutely sweet and caring and kind to
her friends in her text messages as if
it was curated for release to the public
as if these are the lyrics to her next
song I don't know if it is by chance or
is she really DISA fantic but it's
fantastic because this is part of her
brand people trust her imagine Taylor
Swift's files were released to the
public and everybody discovers she's a
horrible divine a terrible individual
would that make her sales go up i'm not
sure but the second interesting thing I
took away from this story is that a new
Twitter account popped up on Twitter
it's called Swift on security and it
uses the persona of Taylor Swift to talk
about cyber security and privacy and
provide advice so if you have customers
or perhaps daughters and nephews and
nieces and people that like Taylor Swift
you can use the Taylor Swift persona to
talk to them about cyber security
because it is about all of us it's not
about fierce cyber warriors standing on
the you know borders there are no
borders anyway perhaps there is only a
gap not a border a gap between security
professionals and hackers and how the
rest of us see how are the rest of you
see the world so I have little a few
more pieces of advice for you this is a
really useful website called have I been
owned calm you will notice the owned is
spelled with P it is a hacker slag have
I been pwned but it means owned have I
been breached that I've been happy
it is a very useful website started by
security researcher and a Microsoft
professional by the name of Troy hunt he
created this tool to aggregate usernames
and passwords that were breached from a
lot of different websites so from the
adobe adobe com hack from the Ashley
Madison hack from a lot of different
websites and services what this website
is useful for except for looking up your
own details is to identify one of the
biggest problems which I'm sure impacts
your organizations or businesses right
now it is the problem of recycling and
i'm not talking about recycling plastic
bottles it is the problem of recycling
passwords everybody recycles passwords
it is perhaps the most popular form of
recycling on the planet at the moment
and in fact this is a problem for you
because when some person uses some
customer uses the same password for
their adobe.com account the Ashley
Madison account and their enterprise
account that makes it a lot easier for
criminals to get into your company and
organization and you can take a look at
this website you'll identify some of the
most popular passwords you are
identified some companies that you know
some enterprises that perhaps you work
with take a look it's a very useful tool
few more points for you this morning
cyber security is about the dating
industry it's about cars it's about
medical devices it's about Hollywood
studios it's about every business
globally doesn't matter what industry
you're in except for help perhaps for
the Amish preachers I don't want to be
offensive to anyone but I heard they
also have smartphones now so perhaps
it's also part of their future as well
that's why the internet needs you not to
grow cool facial hair and join the
cavalry but rather to help protect your
customers and your partners and I would
like to suggest suggest one final point
that could help you do so and I'll take
a point from this gentleman and I don't
normally agree with this gentleman
because he is the former head of the NSA
and the command the the US Cyber Command
chief general Keith Alexander four-star
general four years ago I saw him present
at DEFCON which is the world's largest
gathering of hackers on the planet and
for this conference he took off his
general uniform and put on the hackers
uniform black t-shirt and jeans to give
a hiring pitch in this room right here
is the talent our nation needs this is
what general Alexander had to say to the
hackers four years ago one year before
Snowden of course hackers in the room
said well then stop arresting us we'd
love the work for you it took them a few
more years but just last month the DoD
the Pentagon d United States Tod
announced a program called hack the
Pentagon where they are actively
inviting hackers to collaborate with
them and fight problems in their code
and I think that is fantastic it took
them some years it took some time to get
over general Alexander's latency and the
Snowden drama but here's an idea for you
and for your nieces nephews daughters
grand kids etc Cisco says that the
future is going to need 1,000,000 more
security professionals great news for
you job security but it means that our
industry our community needs more good
hackers and I think they're going to
come from my neck of the woods I think
they're going to come from the DEFCON
hacker community and from the global
movement of positive hackers because
hackers have the talent and the
technology that we all need some of them
create technologies that we all use
every day Tesla is one fantastic example
of a company I like to talk about they
are an innovative electric car via a car
company they do everything differently
and so that same year 2012 the same year
that general Alexander came with great
grandstanding and invited hackers to
collaborate Tesla brought their flagship
model the model s to Las Vegas and they
said to hackers please come play with
our car test us we would like to work
with you we are actively seeking your
collaboration so you know really
practicing what they preach I think and
they're not the only ones companies
around the world are now facilitating
bug bounty programs bug bounty programs
these are ways for companies to work
with hackers some of the biggest
companies on the planet are doing this
facebook yahoo microsoft samsung ebay
western union medical device companies
car companies financial
institutions this is actually my
specific topic of research at the moment
at Tel Aviv University's new
interdisciplinary cyber research center
looking at these bug bounty programs and
understanding how companies can make the
most value out of them this is also
creating a new class if you will or new
and you are niche for security
professionals to become professional bug
hunters and professional bug bounty
managers so the lady on the left is
Marianne she is a professional bug
hunter from Vienna and the lady on the
right is Katie missouri's who managed
Microsoft's bug bounty program and then
helped start hacker one which is one of
the biggest bug bounty companies in the
world right now it's a new breed of
hackers if you will that are out there
to help you do your work even if you
don't know about them this is an Israeli
hacker his name is near goldschlager
Neal was fairly anonymous in Israel as a
hacker but after winning the facebook
hacking competition each year in a row
for three years not only did he make it
to the top ten lists at Facebook and was
invited and offered the job there he was
actually offered a competing job for
another company and moved to California
so bug bounties also helping companies
hire and attract talent from all over
the world in completely new ways perhaps
some another another point for positive
positive positive in okay I need to take
a drink hold on right all better now so
my point was another point of positive
him and optimism for you this morning
more than a hundred years ago a US
Supreme Court justice justice brandeis
said something which I find very
inspiring he said that there is no
better disinfectant than the light of
day and that transparency can be a cure
to many social illnesses personally as a
hacker I have to agree although I see
the inherent conflict between
transparency and privacy I hope that we
can figure out ways to make both of
these work in the future but until we
get there
we have to dance like nobody is watching
but encrypt like everybody is that's the
best piece of advice I hacker can give
you any time and so with that I'd like
to say that okay I have one more point
sorry I would like to say that thanks to
hackers like Moxie Marlinspike and
Nico's cell you may have never heard
about these hackers but the hacker to
the left Moxie is helping develop the
encryption technologies that are now
rolled out through whatsapp and Nico
cell founded the company called wicker
which is an encrypted private messaging
app these technologies like encrypting
whatsapp and private messenger gaps are
making it easier for people to encrypt
which is good because encryption is hard
for some reason so that future is here I
hope you are ready thank you very much