Speaking

Security AND Privacy by Design, NOT by Accident

Security and privacy get framed as a dial you slide between, and that framing is where the trouble starts.

In 2005 I built Anonym.OS with my crew at kaos.theory and pushed both dials as far as they would go. It did 190,000 downloads in thirty-six hours. The critics said ordinary people would never manage it, and I still think they were wrong, but the argument they were making is the one worth having.

This talk is where that landed. Three lenses for making the call, five principles for building systems that don't force the choice, and why the EDR you bought for security is a keylogger with a badge.

for keynote or breakout · technical and executive audiences

What Ransomware Negotiation Teaches You About Leadership

I spent a year on the other side of ransomware conversations, and the technical work turned out to be the straightforward half.

What actually decides whether an organization survives is whether the team trusted each other before the call came in. I'm also a volunteer firefighter and EMT, and the pattern at a 2am fatal crash on the interstate is identical. Crisis reveals character. Trust gets built in the quiet moments between crises.

for executive and leadership audiences · board and CISO tracks

Your Next Job Is Already In Your Network

A friend of mine sent six hundred applications last year. Six or seven final rounds. Zero offers.

That has stopped being unusual, and it has very little to do with how good he is. Across fifty-four million applications, about thirty-five percent of candidates get past a first screen; for referred candidates it's fifty-two percent. This talk covers why the system drifted this way, what actually works instead, and how to become findable without becoming insufferable.

for career tracks · villages · student and early-career audiences