#Kawaiicon @kawaiiconNZ
![](https://pbs.twimg.com/media/EHBra0KVUAAOUyE.jpg)
Long live @kawaiiconNZ!
#Kawaiicon
![](https://pbs.twimg.com/media/EHBsfErU8AAXlxi.jpg)
#Kawaiicon
Just because your path doesn't look like others doesn't mean you're not a hacker.
#Kawaiicon @runasand
![](https://pbs.twimg.com/media/EHBtv-LUwAAdhM4.jpg)
You're both trying to solve hard problems in inventive ways.
#Kawaiicon @runasand
![](https://pbs.twimg.com/media/EHBuZfPU8AAI5Gd.jpg)
InfoSec doesn't have that. There is no set path or the right way to get there.
#Kawaiicon @runasand
![](https://pbs.twimg.com/media/EHBvB57U4AAVNpF.jpg)
Do the things you find interesting, the things that excite you, the things that make you happy.
#Kawaiicon @runasand
![](https://pbs.twimg.com/media/EHBvjvDU8AAe973.jpg)
We can create the jobs that we want.
#Kawaiicon @runasand
![](https://pbs.twimg.com/media/EHBvuX0U8AABDmF.jpg)
The idea that they needed to provide reporters with this training wasn't something that anyone was asking for.
#Kawaiicon @runasand
![](https://pbs.twimg.com/media/EHBwajEU4AAVpyd.jpg)
By identifying that gap they created new and interesting jobs that didn't exist before.
And a couple other examples
#Kawaiicon @runasand
![](https://pbs.twimg.com/media/EHBwwQVUYAAEt7o.jpg)
![](https://pbs.twimg.com/media/EHBwxnzVAAELrRk.jpg)
![](https://pbs.twimg.com/media/EHBwzKaUUAASRcr.jpg)
Nek minnit...
#Kawaiicon @runasand
![](https://pbs.twimg.com/media/EHBxMxxU0AArBoe.jpg)
They loved it!
#Kawaiicon @runasand
![](https://pbs.twimg.com/media/EHBxixrU4AAYUZg.jpg)
You don't want your pedantic security demands to block the story going on page 1.
#Kawaiicon @runasand
![](https://pbs.twimg.com/media/EHByls-U8AABtUq.jpg)
How do enable that but still maintain security?
#Kawaiicon @runasand
#Kawaiicon @runasand
![](https://pbs.twimg.com/media/EHBzSrHUYAAx6Dj.jpg)
We often strongly identify with the work that we do.
Is what I'm doing now in line with what I want to achieve? Does it make me happy? If yes, great! If no, reconsider.
#Kawaiicon @runasand @mjenkins
![](https://pbs.twimg.com/media/EHBz03kUYAA7pT5.jpg)
Please share with her over the next couple days and share with each other.
#Kawaiicon @runasand
![](https://pbs.twimg.com/media/EHB0OKMUUAAYfLG.jpg)
Trust is different in automotive systems.
Dependable system can fault, but is mitigated.
#Kawaiicon
![](https://pbs.twimg.com/media/EHB1wktUEAAS0CL.jpg)
![](https://pbs.twimg.com/media/EHB1x0OU0AA78fc.jpg)
![](https://pbs.twimg.com/media/EHB1zKUU8AE0-Dd.jpg)
Many fault mitigations in place.
#Kawaiicon
![](https://pbs.twimg.com/media/EHB2Km1VUAA0nqS.jpg)
![](https://pbs.twimg.com/media/EHB2L8_U8AA1NwE.jpg)
![](https://pbs.twimg.com/media/EHB2NJTU8AAcfve.jpg)
#Kawaiicon
#Kawaiicon
![](https://pbs.twimg.com/media/EHCD7hZUcAAn9oF.jpg)
#Kawaiicon @pink_tangent
![](https://pbs.twimg.com/media/EHCEUXuXUAI_2jO.jpg)
![](https://pbs.twimg.com/media/EHCEVwAWwAAgV5-.jpg)
Remediation isn't cheap. And it happens repeatedly.
#Kawaiicon @pink_tangent
![](https://pbs.twimg.com/media/EHCEqanX4AA_XBG.jpg)
"If you just put the endpoint security on the file servers, that'll solve the problem!" Nope.
#Kawaiicon @pink_tangent
![](https://pbs.twimg.com/media/EHCFPVfUwAAAEq6.jpg)
Can they support legacy applications?
What about virtual environments?
#Kawaiicon #KawaiiconNZ @pink_tangent
![](https://pbs.twimg.com/media/EHCGZMaVUAAKJpi.jpg)
#Kawaiicon #KawaiiconNZ @pink_tangent
#Kawaiicon #KawaiiconNZ @pink_tangent
![](https://pbs.twimg.com/media/EHCIj7dVUAA2ib8.jpg)
Deploy to your environment and just see what it comes up with over a few months.
Test it in silent mode so you get reporting but it doesn't kill your apps
Needs asset archiving
#Kawaiicon #KawaiiconNZ @pink_tangent
![](https://pbs.twimg.com/media/EHCKhTxVUAA2glz.jpg)
They were told not to allow waste water to flow into the lake, so the stored it in the hollow bridge.
But then there was a storm. One pontoon sank & dragged down others...
#Kawaiicon #KawaiiconNZ @hashoctothorpe
![](https://pbs.twimg.com/media/EHCMSKsU0AA7PZ9.jpg)
#Kawaiicon #KawaiiconNZ @hashoctothorpe
They had problems keeping up with the pumping schedule.
Some pontoons had more water which caused torsion and the winds twisted the pontoons more. This caused cracks to open and the pontoon to sink.
#Kawaiicon #KawaiiconNZ @hashoctothorpe
#Kawaiicon #KawaiiconNZ @hashoctothorpe
(*mostly)
#Kawaiicon #KawaiiconNZ @hashoctothorpe
![](https://pbs.twimg.com/media/EHCN8SVUwAAzgPl.jpg)
Keep the conversation blame free.
Don't make bad jokes
#Kawaiicon #KawaiiconNZ @hashoctothorpe
![](https://pbs.twimg.com/media/EHCOb3FU8AAXslD.jpg)
The key to understanding systems and people with different perspectives than you do.
No two people have experience of the same incident.
#Kawaiicon #KawaiiconNZ @hashoctothorpe
![](https://pbs.twimg.com/media/EHCOyPwVAAE5XwW.jpg)
Things to avoid:
"you"
"why"
And more...
#Kawaiicon #KawaiiconNZ @hashoctothorpe
![](https://pbs.twimg.com/media/EHCPBPuVUAE20SK.jpg)
![](https://pbs.twimg.com/media/EHCPCmoVUAAoVOu.jpg)
![](https://pbs.twimg.com/media/EHCPDt1U4AElWNx.jpg)
This isn't compassionate and it's not helping to identify the problem
#Kawaiicon #KawaiiconNZ @hashoctothorpe
![](https://pbs.twimg.com/media/EHCPNueVAAI3HjC.jpg)
What questions can we ask to get the longest answer. Different from what we normally want in business.
We are looking for a remediation item.
#Kawaiicon #KawaiiconNZ @hashoctothorpe
![](https://pbs.twimg.com/media/EHCPdirUwAAMJ2k.jpg)
How were people able to make that error?
#Kawaiicon #KawaiiconNZ @hashoctothorpe
![](https://pbs.twimg.com/media/EHCPokEUUAAWy7l.jpg)
- Stay on time and on topic
- Practice interrupting (for a good reason)
- Who is talking and who isn't?
- Let's talk about humour (or please don't)
#Kawaiicon #KawaiiconNZ @hashoctothorpe
![](https://pbs.twimg.com/media/EHCQhccU8AAkSie.jpg)
![](https://pbs.twimg.com/media/EHCQissVAAAGwTb.jpg)
![](https://pbs.twimg.com/media/EHCQj-dUEAAE8dJ.jpg)
![](https://pbs.twimg.com/media/EHCQlWcUwAAuXaa.jpg)
Then move on & never bring it up again.
#Kawaiicon #KawaiiconNZ @hashoctothorpe
![](https://pbs.twimg.com/media/EHCRc4qUEAA5UFL.jpg)
#Kawaiicon #KawaiiconNZ @hashoctothorpe
Hiding malicious code in bit of memory that is not executable.
#Kawaiicon #KawaiiconNZ
![](https://pbs.twimg.com/media/EHCT2sTU8AA7Pk2.jpg)
#Kawaiicon #KawaiiconNZ
![](https://pbs.twimg.com/media/EHCWJIUU0AApDz9.jpg)
Who let this old guy on stage?
Apparently there is a code brown?!
A risk register line item that has never been activated before!
#Kawaiicon #KawaiiconNZ @Metlstorm
![](https://pbs.twimg.com/media/EHCX4OkU0AAW9o0.jpg)
The loser can be show that the results are false.
#Kawaiicon #KawaiiconNZ
They will do almost anything to avoid it.
#Kawaiicon #KawaiiconNZ
Supervised (the government is responsible for the validity of your vote) vs remote (you're responsible for validity of your vote)
#Kawaiicon #KawaiiconNZ
![](https://pbs.twimg.com/media/EHCqcLzUEAAp7x2.jpg)
Should responsibility be on the state or the individual?
#Kawaiicon #KawaiiconNZ
![](https://pbs.twimg.com/media/EHCqyVMUwAYXLia.jpg)
Difference is in the scale of the require conspiracy.
#Kawaiicon #KawaiiconNZ
![](https://pbs.twimg.com/media/EHCrKtKU0AAhINY.jpg)
Argument is it will cause increased turnout. But that hasn't played out in reality.
#Kawaiicon #KawaiiconNZ
![](https://pbs.twimg.com/media/EHCrmrEUEAAA13D.jpg)
More likely your disenfranchise a cohort without easy access to the internet.
#Kawaiicon #KawaiiconNZ
Need individual verifiability & universal verifiability (so everyone knows that all the votes were correctly counted).
#Kawaiicon #KawaiiconNZ
![](https://pbs.twimg.com/media/EHCsZT0UwAAoh5Z.jpg)
Doesn't offer what we want.
So why are we still deploying it?
#Kawaiicon #KawaiiconNZ
![](https://pbs.twimg.com/media/EHCs6n4UEAUPC1e.jpg)
These are all done by Scytl - but nobody knows who they're owned by and people who look into it get shut down quickly. 😳
References to @SarahJamieLewis
& @VTeagueAus
#Kawaiicon #KawaiiconNZ
![](https://pbs.twimg.com/media/EHCtVg_UUAQpMlo.jpg)
They opened up the central voting system to Scytl because there were "performances problems".
Please. No.
#Kawaiicon #KawaiiconNZ
![](https://pbs.twimg.com/media/EHCtmNkVAAAK8XX.jpg)
They were sharing a SSL cert with... Lots of orgs.
Lots of bad bad not good.
#Kawaiicon #KawaiiconNZ
![](https://pbs.twimg.com/media/EHCuILbUEAAyGqi.jpg)
![](https://pbs.twimg.com/media/EHCuJY3UwAAbqv5.jpg)
And they broke the separation principle.
#Kawaiicon #KawaiiconNZ
![](https://pbs.twimg.com/media/EHCufyJUUAAtg7I.jpg)
![](https://pbs.twimg.com/media/EHCuhPnU0AABREb.jpg)
Auditor says its ok because the vendor is reputable.
But... They were breached over that period.
#Kawaiicon #KawaiiconNZ
![](https://pbs.twimg.com/media/EHCvGcEUcAAHs33.jpg)
![](https://pbs.twimg.com/media/EHCvH4YUYAANR_8.jpg)
![](https://pbs.twimg.com/media/EHCvI_wUEAAK9dQ.jpg)
27 findings, some very critical. And weird redactions.
#Kawaiicon #KawaiiconNZ
![](https://pbs.twimg.com/media/EHCvwTzUUAA10pL.jpg)
![](https://pbs.twimg.com/media/EHCvxy1UYAAYcoE.jpg)
![](https://pbs.twimg.com/media/EHCvy_bUUAEgeu-.jpg)
![](https://pbs.twimg.com/media/EHCv0GzU4AEl_5W.jpg)
#Kawaiicon #KawaiiconNZ
![](https://pbs.twimg.com/media/EHCw2p3UEAA4wvY.jpg)
Now its something impossible that is actually happening
#Kawaiicon #KawaiiconNZ @vashta_nerdrada
![](https://pbs.twimg.com/media/EHCx--8VAAAuXWj.jpg)
#Kawaiicon #KawaiiconNZ @vashta_nerdrada
![](https://pbs.twimg.com/media/EHCya9QU0AAVVA8.jpg)
#Kawaiicon #KawaiiconNZ @vashta_nerdrada
![](https://pbs.twimg.com/media/EHCy8VSVUAA5Ynw.jpg)
Build for resiliency, don't try and predict black swans.
#Kawaiicon #KawaiiconNZ @vashta_nerdrada
![](https://pbs.twimg.com/media/EHC2oOJVUAA5Pzr.jpg)
#Kawaiicon #KawaiiconNZ
#Kawaiicon #KawaiiconNZ @SophiaFrentz
![](https://pbs.twimg.com/media/EHDFF1NVAAA0y4E.jpg)
![](https://pbs.twimg.com/media/EHDFHHpUUAACpai.jpg)
Even if you consent, you're providing info on your immediate family.
#Kawaiicon #KawaiiconNZ @SophiaFrentz
![](https://pbs.twimg.com/media/EHDFhIMUcAA8HWF.jpg)
#Kawaiicon #KawaiiconNZ @SophiaFrentz
![](https://pbs.twimg.com/media/EHDGxrLU0AAj0A7.jpg)
Its not all bad! And electronic medical records provide quick access to information.
#Kawaiicon #KawaiiconNZ @SophiaFrentz
![](https://pbs.twimg.com/media/EHDHxQMU8AAYRmY.jpg)
#Kawaiicon #KawaiiconNZ @SophiaFrentz
![](https://pbs.twimg.com/media/EHDH_aKVUAAxCbq.jpg)
![](https://pbs.twimg.com/media/EHDIAlRUUAEgQj3.jpg)
We have to consider social issues when creating technical solutions.
With technical solutions we're just amplifying existing social problems.
#Kawaiicon #KawaiiconNZ @SophiaFrentz
![](https://pbs.twimg.com/media/EHDIfbeVUAA1OC8.jpg)
- Make responsible individual decisions
- Educating non-sector friends on needs, requirements & values
- Be the squeaky wheel!
#Kawaiicon #KawaiiconNZ @SophiaFrentz
![](https://pbs.twimg.com/media/EHDI_duUYAAjMF2.jpg)
Nobody else should be able to make those decisions without the patient's explicit consent.
#Kawaiicon #KawaiiconNZ @SophiaFrentz
#Kawaiicon #KawaiiconNZ @SophiaFrentz
![](https://pbs.twimg.com/media/EHDKjvKU0AIhHip.jpg)
#Kawaiicon #KawaiiconNZ
![](https://pbs.twimg.com/media/EHDLdd6UcAAAEO7.jpg)
![](https://pbs.twimg.com/media/EHDLe2nVAAAbT-3.jpg)
![](https://pbs.twimg.com/media/EHDLgEGUwAURAfn.jpg)
With photos.
And internals.
And... Dave's details.
#Kawaiicon #KawaiiconNZ
![](https://pbs.twimg.com/media/EHDMfW4VAAAuz9m.jpg)
![](https://pbs.twimg.com/media/EHDMg4-U0AMfaDs.jpg)
![](https://pbs.twimg.com/media/EHDMiPMUEAAuuMD.jpg)
This should be fun! Basically incrementing a field on the card.
#Kawaiicon #KawaiiconNZ
![](https://pbs.twimg.com/media/EHDPIvdU4AATaOd.jpg)
Known vulnerability where you can use one key to calculate other keys.
#Kawaiicon #KawaiiconNZ
![](https://pbs.twimg.com/media/EHDQH1NUEAIaM7Z.jpg)
![](https://pbs.twimg.com/media/EHDQJGaUwAE9Er_.jpg)
![](https://pbs.twimg.com/media/EHDQKaJU8AEZtSM.jpg)
![](https://pbs.twimg.com/media/EHDQL5QUYAUeFUL.jpg)
Will he tell us? No.
So Gallagher won't do electro-product testing on him.
#Kawaiicon #KawaiiconNZ
![](https://pbs.twimg.com/media/EHDRs7YUwAEgJTA.jpg)
![](https://pbs.twimg.com/media/EHDRuZlUUAMXHJi.jpg)
![](https://pbs.twimg.com/media/EHDRvjWUcAAFm8V.jpg)
#Kawaiicon #KawaiiconNZ
![](https://pbs.twimg.com/media/EHDTJpMUEAICceU.jpg)
Old cards just scream out their secret the second they're powered up.
#Kawaiicon #KawaiiconNZ
![](https://pbs.twimg.com/media/EHDUYnKUcAAUEy6.jpg)
![](https://pbs.twimg.com/media/EHDUaC3UUAAONFZ.jpg)
Try and intercept the communication between a legit card & reader.
#Kawaiicon #KawaiiconNZ
![](https://pbs.twimg.com/media/EHDUojbUcAAIRLk.jpg)
Reader says do it again.
#Kawaiicon #KawaiiconNZ
![](https://pbs.twimg.com/media/EHDVKjgVAAIOeMi.jpg)
Not very subtle...
#Kawaiicon #KawaiiconNZ
![](https://pbs.twimg.com/media/EHDV7UuU0AIHskH.jpg)
![](https://pbs.twimg.com/media/EHDV9YdUcAA_21e.jpg)
![](https://pbs.twimg.com/media/EHDV_UVUUAA02Ws.jpg)
![](https://pbs.twimg.com/media/EHDWBXoVAAAe4uP.jpg)
#Kawaiicon #KawaiiconNZ
![](https://pbs.twimg.com/media/EHDWgmgVAAAa9_u.jpg)
![](https://pbs.twimg.com/media/EHDWh2aVAAYn3UR.jpg)
And... The NZ Government department didn't appreciate Matt scanning their RFID readers and seized his laptop... 😱
#Kawaiicon #KawaiiconNZ
![](https://pbs.twimg.com/media/EHDXnSkUEAImvcY.jpg)
![](https://pbs.twimg.com/media/EHDXovuUEAEfzyr.jpg)
#Kawaiicon #KawaiiconNZ
![](https://pbs.twimg.com/media/EHDYXrHUUAEqdF_.jpg)
![](https://pbs.twimg.com/media/EHDYZAOU8AA5K7M.jpg)
But for other people our advice can be because that advice would be physically difficult or impossible to follow.
#Kawaiicon #KawaiiconNZ @lady_nerd
![](https://pbs.twimg.com/media/EHDZZy6UcAI4oOB.jpg)
#Kawaiicon #KawaiiconNZ @lady_nerd
If we can't protect our future old selves, how do we protect our elders today?
#Kawaiicon #KawaiiconNZ @lady_nerd
![](https://pbs.twimg.com/media/EHDaJr8UEAA5mH4.jpg)
![](https://pbs.twimg.com/media/EHDaLRQUcAADnuh.jpg)
#Kawaiicon #KawaiiconNZ @lady_nerd
Being digitally active is kind of a human right. It is a substantially increasing part of the day-to-day for all demographics.
#Kawaiicon #KawaiiconNZ @lady_nerd
![](https://pbs.twimg.com/media/EHDbJ0fUEAA66HB.jpg)
![](https://pbs.twimg.com/media/EHDbLP2UUAA-kA3.jpg)
How many of these do we do in the digital space?
Most of them.
#Kawaiicon #KawaiiconNZ @lady_nerd
![](https://pbs.twimg.com/media/EHDba-ZUEAEqTs_.jpg)
Diagnostic Frameworks for Daily Living
#Kawaiicon #KawaiiconNZ @lady_nerd
![](https://pbs.twimg.com/media/EHDbu0TVAAAi5Je.jpg)
![](https://pbs.twimg.com/media/EHDbwGmUwAEV13l.jpg)
![](https://pbs.twimg.com/media/EHDbxW4UcAE9xih.jpg)
#Kawaiicon #KawaiiconNZ @lady_nerd
![](https://pbs.twimg.com/media/EHDcJ2GU0AAdvM3.jpg)
![](https://pbs.twimg.com/media/EHDcLNbUEAE4SEL.jpg)
![](https://pbs.twimg.com/media/EHDcMZyUYAAYJ7d.jpg)
#Kawaiicon #KawaiiconNZ @lady_nerd
![](https://pbs.twimg.com/media/EHDcn1EUUAEmgMz.jpg)
#Kawaiicon #KawaiiconNZ @lady_nerd
![](https://pbs.twimg.com/media/EHDc-KWUYAAkI40.jpg)
![](https://pbs.twimg.com/media/EHDc_rPVUAEcDeb.jpg)
Mass collection of data!
Lets do a digital independence assessment for a country.
Refine the assessment.
#Kawaiicon #KawaiiconNZ @lady_nerd
![](https://pbs.twimg.com/media/EHDdoxzUYAEA33T.jpg)
![](https://pbs.twimg.com/media/EHDdqHbUEAAF5kN.jpg)
![](https://pbs.twimg.com/media/EHDdrQiU0AAvBLS.jpg)
#Kawaiicon #KawaiiconNZ @lady_nerd
![](https://pbs.twimg.com/media/EHDeFLkU8AAsLLb.jpg)
![](https://pbs.twimg.com/media/EHDeGwKVAAApQqS.jpg)
![](https://pbs.twimg.com/media/EHDeIFKU4AETS9d.jpg)
![](https://pbs.twimg.com/media/EHDeJhhUEAAq9vt.jpg)
@kawaiiconNZ #Kawaiicon #KawaiiconNZ