The Cavalry Is US: Protecting the public good
summary
Asserts that “the cavalry isn¹t coming” and organizes a movement that actually builds channels: a public mailing list and Google group, a two‑day constitutional congress that draws about 100 people at DerbyCon, and a focused medical device track to map failures and interfaces with FDA processes. Demonstrates practical wins and gaps — coordinated disclosure playbooks, outreach into automotive and healthcare communities, and a bug‑smash that surfaces roughly 68–70 reportable vulnerabilities — all intended to shift research toward public‑safety outcomes.
AI-written summary · about
chapters (29)
- 0:00Introduction
- 0:40About Josh
- 1:54General flow
- 2:08Why Cavalry
- 7:52The Internet of Things
- 8:29The Cavalry is not coming
- 10:28Our hobby became our profession
- 11:13Order of operations
- 11:29Relative gains
- 11:54Funnel
- 12:23Mobile
- 12:46Car
- 13:26Medical Devices
- 14:27Consumer Protection
- 16:06The Cavalry isnt coming
- 16:34We cant do it alone
- 18:58Being good ambassadors
- 26:10References
- 26:23Where are we going
- 28:25What should we do
- 31:24Dave Kennedys testimony
- 33:56What we disagree on
- 39:01We want to narrow that down
- 39:46How do you get involved
- 42:39We need your help
- 47:35Reportable vulnerabilities
- 48:04Insulin pump example
- 48:42Cavalry and Google group
- 49:19So we will end planting the seed
related talks
47mThe Cavalry is Us
57mPanel Discussion: This One Time at CVD Camp
53mCommon Good Cyber
52mKeynote: Who Deserves Cybersecurity? Expanding Our Circle of Care
01h 04mOpen Discussion - International Challenges with CVD, CNA, and CVE
08mClosing Remarks
51mPanel Discussion: It is a Tale as Old as Time…. a CNA, the NVD, and a CVE Consumer Walk Into a ...
29mThe Quality Era of CVE: A Blueprint for Global Software Safety