Keynote: We Deserve Rights
summary
Talk argues that laws and media perception cause tangible harms: 1 out of 4 researchers avoid reporting, companies lack VDPs, and 94% of Forbes 2000 have no vulnerability disclosure policy. Examples include a DJI case where a $30k offer comes with a contract and CFA threats until the researcher publishes communications and legal pressure stops, and historical misuse of the CFA in the Aaron Swartz prosecution. Practical fixes named: disclose.io, hackerstories.hackingisnotacrime.org, safe-harbor lists and clearer scope and contact practices.
AI-written summary · about
chapters (15)
- 0:00Start
- 3:59THE CURRENT LANDSCAPE
- 10:01KNOW HOW HUMAN BEHAVIOR WORKS
- 15:39PART 3: ACT
- 17:03Socially constructed beliefs stem from the media.
- 17:14Through Imagery ...
- 18:04And it hurts when the media doesn't know the difference between a hacker and an attacker.
- 20:22SEND A LETTER TO THE COPY DESK.
- 21:17And please don't wear a hoodie when on camera.
- 24:22HOW TO INFLUENCE LEGISLATION
- 29:13WITH IMPROVEMENTS TO LEGISLATION...
- 29:52What can you do?
- 30:37HOW TO COLLAB WITH ORGANIZATIONS
- 31:07Why vulnerability disclosure?
- 31:39How to improve it?
related talks
27mHacker Rights
42mKeynote: Hacking Policy and Policy Hacking - A Hacker Guide to...
25mEverything Old Is New Again: Legal Restrictions on...
46mTime for a Change Why It's More Important Than Ever to Revisit the CFAA
45mKEYNOTE 2 - A Risk Assessment of Logo Disclosures
21mKeynote: Maybe We Have Been Doing This Wrong?: Protester as Persona
48mThe Law and Economics of Bug Bounties
52mKeynote: Who Deserves Cybersecurity? Expanding Our Circle of Care