Cassandra at the Keyboard: Whistleblowing at all scales
summary
Concrete thresholds matter: an internal docs mismatch about Docker leads to stalled features, being asked to plagiarize the AMA creates legal liability, leaking Michael Rogers’s email cache helps force a governor’s resignation while leaving the leaker monitored, Barnaby Jack demonstrates remote kills of pacemakers and insulin pumps, and a tweeted photo triggers a DDoS that costs Adrian Richards her job. Prepare by save emails and document everything, pick who has power authority and sympathy, offer a fix, expect retaliation and possible survivor guilt.
AI-written summary · about
chapters (41)
- 0:00Introduction
- 0:45Twitter handle
- 1:04Apologies
- 1:28Why Cassandra
- 4:38Whistleblowing
- 5:05Siblings
- 5:49Surveillance
- 6:31Internal Employee
- 7:01Mandated Reporter
- 8:04I was an internal employee
- 9:05Michael Rogers
- 11:17Would I do it again
- 11:33Barnaby Jack
- 12:49Edward Snowden
- 13:35You have a problem
- 14:37Empathy
- 15:00External rules
- 15:33Burning things down
- 16:04You are invoking power
- 16:16You know your consequences
- 16:33Adrian Richards
- 19:44Be prepared
- 20:13Document retention
- 21:54Team
- 22:28Audience matters
- 22:57Power matters
- 23:09Authority
- 23:39Sympathy
- 24:18How you tell them matters
- 24:54Go in with a solution
- 25:41Business case
- 26:44Tacoma Narrows
- 26:55Find a new audience
- 27:17Split the rock
- 27:46Get out of Dodge
- 28:09What if it works
- 28:21Survivor guilt
- 28:58Retaliation
- 30:37Internal Structure
- 31:07Resolution
- 31:17Conclusion
related talks
21mOn Trust: Stories from the Front Lines
36mFrom Dork to Diplomat: Communicating Coherently for Vulnerability & Incident Response
51mNot Go Quietly Adaptive Strategies and Unlikely Teammates
34mThe Aftermath of a Social Engineering Pentest - Are We Being Ethically Responsible?
58mSocial Engineering: Hacking Humans
31mAn Ant in a World of Grasshoppers
30mCollapsology: Why your biggest threat isn’t exposed RDP
49mBeware of Survivorship Bias!