When I looked at the #shmoocon schedule, I thought I'd get a lot out of seeing @thepacketrat unpack his research into pig-butchering scams. Then I checked and saw that my client PCMag had somehow not run a breakdown of this tactic*, so I had to write up his talk.
The closing slides from this year's #shmoocon badge puzzle. As this was likely the last time I'll be able to compete in this contest, this year I played to win. And my daughter and I did just that! :)
(it also occurred to us way too late that we should've called ourselves "The Sith Lords," instead of "The Time Lords,” but since the theme of the con was time travel…the latter seems most appropriate anyway.)
I'm seeing an interesting trend between #hackaday#supercon and #shmoocon. When called out on their disgracefully gross single tone white cis male speaker lineups, they each responded with "we tried reaching out to other types of people (let me guess, a few white women), and they refused us".
This seems to clear their conscience and resolve it for them.
ahem YOU HAVE NOT MADE AN ENVIRONMENT GOOD FOLKS WANT TO PARTICIPATE IN.
After figuring out years ago that I can listen better, especially over long periods of time, if I have something to keep my hands busy, I try to always have a #crochet project on hand heading into multi-day meetings or conferences.
Ran out of time to prep for this one, so I started winding my skein into a yarn ball during opening remarks, got my sizing swatch done for a one-skein triangle shawl (Moogly Fortune's Shawlette) by the end of One Track Mind, and made a nice bit more progress during the firetalks...
It's the perfect con project - a simple diagonal-box-stitch repeat, no complex counting required. Just add a box every row until I run out of yarn, and then frog back until I have enough yarn left for the edging. 😁
@wendynather Tonight's #shmoocon firetalk on the Cookie Dough model of security, in which @TindrasGrove made a great analogy to infosec from Nestle's "don't eat raw cookie dough" vs Pillsbury's "we made the cookie dough safe because we know you're going to eat it even if we tell you not to" reminded me in - the best possible way - of your incredible talk on Democratizing Security...
The Internet is for clicking - cookie dough is for eating - meet the users where they are!! 💞
Next up at #shmoocon#firetalks Edward Warren “Inter-App Collusion: Exploiting the Improper Export of Android Application Components for Privilege Elevation & Credential Theft”
#ShmooCon#Firetalks first speaker, Maddie Bright, is going on now! “Looking Into The Past: How Reflecting Helped Me Grow as a New Professional” Very relevant giving our time travel theme!
To celebrate #Shmoocon, even though I’m not there, I’ll relate a story from my first time there, which was at least ten years ago …
Everyone was in the typical hacker hoodies and black t-shirts. I decided I’d be a REAL nonconformist and wear business drag. So I went out and wandered around the vendor tables.
One of the dudes at a vendor table asked me hesitantly, “Do you … do security?”
“Fuck it,” I said, and went back to my room and put on a black t-shirt.