Social responsibility as security professionals

Social responsibility as security professionals
- Pivot to attack others
- Language assumptions
  - Assuming everyone speaks the same language
  - Assuming that accents are understandable
  - Assuming that area specific idiom makes sense to everyone
  - Assuming that date formats make sense
- Paying ransomware
- Build people up
- Beware of bias
  - Story about recording and broadcast being biased away from women's voices
  - Accent, vocabulary discrimination
- Make everything available for people with disabilities
  - Visual impairment
  - Learning disabilities
    - Fonts and spacing
- Assumptions about client connectivity and equipment
  - Bandwidth costs
  - MFA - often requires a smart phone
  - Assumption that everyone has Internet
  - Assumption that people have mic and headphone tech
- Using your powers for good
  - Working with EFF, ACLU, European Digital Rights, Irish council of human rights
- Code of conduct for events
  - MINASWAN
- Diversity
  - Attackers are diverse, so we (security) need to be diverse
- Challenges and opportunities in partnering with goverment
  - Law enforcement
    - Afraid to report found vulnerabilities
      - Threat of prosecution
  - Critical infrastructure
    - Maybe a public/private partnership? NGO as a buffer/watchdog?
  - Military