Opening Remarks

Opening Remarks

Speakers: Reed Loden

Conference: BSidesSF 2024

YouTube: https://www.youtube.com/watch?v=H9ocK3RVduU

Overview

This talk, delivered by Reed Loden, President and Lead Organizer for BSidesSF, served as the opening remarks for the BSidesSF 2024 conference. It welcomed attendees, set the tone for the event, and provided crucial logistical and community-focused information. The address emphasized the conference's central theme, "You can't spell dystopia without AI," highlighting the pervasive influence of artificial intelligence across more than 50% of the scheduled talks. Loden underscored the community-driven, volunteer-led nature of BSidesSF, stressing the expectation for all participants to actively engage and contribute to the conversation.

Beyond the technical program, the remarks detailed the extensive support infrastructure and diverse engagement opportunities available to attendees. This included a robust Code of Conduct ensuring a safe environment, a unique photo/video policy requiring consent, and a wide array of "Villages" dedicated to specialized security topics. Notably, the conference also provided critical support services such as a Career Village, free professional headshots, and an onsite emotional support therapist, Dr. Sarah, acknowledging the broader life and career challenges faced by many in the community. The opening remarks were essential in orienting participants, reinforcing the core values of the BSides movement, and encouraging full immersion in the collaborative and educational experience.

Background

▶ Watch: Conference theme: 'You can't spell dystopia without AI' (00:30)

BSidesSF is an integral part of the global Security BSides framework, a series of independently operated, volunteer-run conferences dedicated to fostering community-driven security discussions. As Reed Loden explained, each BSides event is "put on by and for the community," reflecting a grassroots ethos where participation and collaboration are paramount. The BSides movement originated from a desire to create more accessible, community-focused security events, often running concurrently with larger, more commercial conferences, to provide an alternative platform for diverse voices and emerging research.

The problem that BSidesSF, and the broader BSides framework, addresses is the need for an inclusive, affordable, and community-centric forum where security professionals, enthusiasts, and newcomers can share knowledge, network, and develop skills in a supportive environment. Unlike some larger conferences, BSides events are typically organized by a dedicated team of volunteers, working year-round to bring the event to fruition. For BSidesSF 2024, this involved approximately 20 leads and 15 staffers, in addition to a call for presentations review committee. The conference experienced a record number of talk submissions this year, indicating a growing interest and a vibrant community eager to contribute. The recurring nature of the event, with features like the Career Village and the presence of Dr. Sarah, suggests an ongoing commitment to addressing not just technical security challenges but also the personal and professional well-being of its community members.

Key Findings

▶ Watch: Consent-based photo and video policy (03:00)

While "Opening Remarks" do not typically present research findings, Reed Loden's address outlined several key aspects and contributions of the BSidesSF 2024 conference itself, which can be considered the "findings" regarding the event's structure, focus, and community engagement.

Firstly, the overarching theme for BSidesSF 2024 was explicitly stated as "You can't spell dystopia without AI." This theme underscored a significant programmatic focus, with Loden noting that over 50% of the talks scheduled for the conference incorporated some type of AI component. This highlights a deliberate effort to address the burgeoning concerns and opportunities at the intersection of artificial intelligence and cybersecurity, reflecting a timely and relevant response to current industry trends.

Secondly, the conference demonstrated significant growth and community engagement. BSidesSF 2024 received the most talk submissions ever, indicating a robust and active community eager to share knowledge. Similarly, the Capture the Flag (CTF) event, a perennial favorite, also reported a record number of players participating, showcasing the strong interest in hands-on technical challenges.

Thirdly, the conference's commitment to a safe and inclusive environment was a prominent "finding." A comprehensive Code of Conduct was in place, accessible in programs, on the website, acknowledged during ticket purchase, and displayed on signs. This code emphasized respect, tolerance, kindness, and explicitly prohibited physical, verbal, or sexual harassment, intimidation, or marginalization. A clear reporting mechanism was provided, including contacting staff or safety ops members, or emailing [email protected], which is monitored by pagers. Additionally, a unique video/photo policy was highlighted, requiring explicit consent from individuals within the frame before taking pictures or videos, with exceptions only for official photographers and social media volunteers.

Fourthly, BSidesSF 2024 offered an extensive array of Villages, expanding beyond traditional talks to provide diverse interactive experiences. These included dedicated spaces for AI Village (aligned with the conference theme), Adversary, API Security, Bug Bounty, Cloud, Crypto and Privacy, Embedded Systems, Hardware Challenge, Lockpick, and Personal Security. This broad offering underscores the conference's commitment to hands-on learning and specialized community interests.

Finally, the conference demonstrated a strong focus on attendee well-being and career support. The Career Village was a significant feature, specifically addressing the recent job changes, layoffs, and role reductions experienced by many in the security community, including BSidesSF staff. This village offered resume review, career discussions, and opportunities to meet potential employers. Complementing this, free headshots were available for professional profiles. A unique and compassionate offering was the return of Dr. Sarah, an onsite emotional support therapist, providing confidential support for attendees facing life difficulties. These initiatives collectively represent a holistic approach to supporting the security community beyond purely technical content.

Technical Deep Dive

▶ Watch: Overview of various villages, including AI, Adversary, API Security (05:00)

Given that "Opening Remarks" primarily serve as an introduction and logistical overview, a traditional technical deep dive into specific vulnerabilities, exploits, or architectural designs is not applicable. However, the speaker, Reed Loden, did touch upon a few technical elements related to the conference's interactive features and operational mechanisms.

One notable technical aspect mentioned was the electronic badges provided to attendees. Loden highlighted their hackable nature, stating that "you can actually just plug these directly into your computer, it'll pop up like a flash drive." He further clarified that "they're just Python files so you can just edit them directly and have some really fun with your badges." This design choice encourages hands-on exploration and customization, aligning with the hacker ethos of the security community. It provides a tangible, interactive component that allows attendees to engage with basic programming and hardware interaction, fostering a sense of play and learning. Support for badge-related issues was available at the CTF room or info desk.

Another technical detail concerned the mechanism for audience engagement during presentations. For Q&A sessions with presenters, the conference utilized Slido. Attendees could access the platform for questions and interaction via a dedicated URL: bsidessf.org/Q&A. This choice of a widely used interactive Q&A platform ensures a streamlined process for audience participation, allowing for question submission, upvoting, and moderation, thereby enhancing the interactive experience of the talks.

The conference also leveraged an online schedule platform, Sked, for attendees to view the full schedule, including talks, villages, and workshop stages. This digital platform is crucial for navigation and planning within a multi-track, multi-location conference. Furthermore, Sked was integrated with a feedback mechanism, allowing attendees to provide specific feedback on individual talk sessions directly at the bottom of each item's page on the online schedule. This digital feedback collection is a key technical component for continuous improvement, enabling the BSides team to systematically gather and analyze attendee input for future planning.

Finally, the mention of [email protected] being monitored and going directly to "pagers people" implies a technical backend for incident response, ensuring that reports of Code of Conduct violations are promptly received and addressed by the appropriate personnel, even outside of direct staff interaction. While the specific technology behind the "pagers" isn't detailed, it points to an operational system designed for immediate alert and response.

In summary, while not a deep dive into security vulnerabilities, the technical mentions in the opening remarks highlight the conference's use of interactive hardware (hackable badges), modern audience engagement tools (Slido), digital scheduling and feedback platforms (Sked), and an incident response communication system, all contributing to a well-organized and engaging attendee experience.

Demo / Proof of Concept

▶ Watch: Career Village addressing recent layoffs and job changes (06:00)

The "Opening Remarks" by Reed Loden did not include a live demonstration or a proof of concept of any technical exploit, tool, or system. As an introductory address, its purpose was to welcome attendees, outline the conference's structure and theme, and provide essential logistical and community-focused information rather than showcasing technical implementations.

Defensive Implications

▶ Watch: Feedback mechanisms for conference and specific talks (10:00)

While the "Opening Remarks" by Reed Loden did not delve into specific technical defensive strategies against cyber threats, the content of the address carried significant defensive implications for the cybersecurity community, both in terms of fostering a secure environment and equipping professionals with knowledge.

Firstly, the explicit and rigorously enforced Code of Conduct serves as a critical defensive measure against harassment, intimidation, and marginalization within the conference environment. By clearly stating expectations for respect and tolerance, providing multiple reporting channels (staff, safety ops, [email protected]), and promising immediate action ("do not be an ass or we'll kick your ass out"), BSidesSF actively defends against behaviors that could create an unsafe or unwelcoming atmosphere. This fosters an environment where individuals feel secure enough to participate, learn, and contribute, which is foundational for effective knowledge sharing in the security domain.

Secondly, the conference's thematic focus on AI and security, with over 50% of talks featuring an AI component, directly addresses an emerging and critical defensive frontier. As AI technologies become more integrated into systems and applications, understanding their security implications—both as potential attack vectors and as tools for defense—is paramount. By dedicating significant program space to this topic, BSidesSF equips attendees with the knowledge to anticipate, identify, and mitigate AI-related risks, thereby strengthening their defensive posture in real-world scenarios. The presence of an AI Village further facilitates hands-on learning and collaborative problem-solving in this crucial area.

Thirdly, the wide array of specialized Villages (e.g., API Security, Cloud, Embedded Systems, Hardware Challenge, Lockpick, Personal Security) provides focused learning opportunities that directly enhance defensive capabilities. These villages offer practical, hands-on experiences that complement theoretical talks, allowing attendees to develop skills in securing specific technologies and domains. For instance, the API Security Village directly addresses a common attack surface, while the Cloud Village focuses on securing modern infrastructure. These specialized learning environments are crucial for building a well-rounded defensive skillset.

Fourthly, the provision of a Career Village, free headshots, and an onsite emotional support therapist (Dr. Sarah) has indirect but vital defensive implications for the cybersecurity workforce. The security industry faces significant talent shortages and high rates of burnout. By supporting attendees through career transitions, offering professional development resources, and providing mental health support, BSidesSF helps to retain talent, reduce stress, and foster a more resilient and sustainable workforce. A healthy, well-supported workforce is better equipped to handle the constant pressures of defensive security work.

Finally, the emphasis on community participation ("no attendees, everybody is expected to participate") and the mechanisms for feedback (via bsidessf.org/feedback and the online schedule) contribute to a collective defense. By encouraging active engagement and continuous improvement, the conference cultivates a stronger, more collaborative security community. This collective intelligence and shared experience are invaluable defensive assets, as threats evolve rapidly and require a coordinated, community-wide response. The hackable electronic badges, while seemingly a fun novelty, also encourage a defensive mindset by inviting users to explore and understand the underlying "Python files," fostering curiosity and technical literacy that can be applied to understanding and securing other systems.

In essence, BSidesSF 2024, as outlined in the opening remarks, acts as a multi-faceted platform for strengthening defensive capabilities—from fostering a safe and inclusive environment, to educating on cutting-edge threats like AI, to providing practical skill-building, and supporting the well-being of the security professional.

Key Takeaways

• AI as a Central Theme: BSidesSF 2024 prominently featured the intersection of Artificial Intelligence and security, with over 50% of the conference talks incorporating an AI component, reflecting a critical focus on this evolving domain.
• Community-Driven and Inclusive Environment: The conference is a 100% volunteer-run event, emphasizing active participation from all attendees and maintaining a strict Code of Conduct to ensure a safe, respectful, and welcoming environment for everyone.
• Diverse Engagement Opportunities: Beyond traditional talks, BSidesSF offered numerous specialized "Villages" (e.g., AI, API Security, Cloud, Lockpick), a record-breaking Capture the Flag event, interactive "hackable" electronic badges, and collaborative Birds of a Feather sessions.
• Comprehensive Attendee Support: The conference provided significant resources for attendee well-being and career development, including a dedicated Career Village (offering resume review and employer connections), free professional headshots, and an onsite emotional support therapist, Dr. Sarah.
• Commitment to Improvement and Philanthropy: BSidesSF actively solicited attendee feedback through multiple channels for continuous improvement in future years and supported charitable causes (Techbridge Girls, E, and The Gardens of Golden Gate Park) through net profits from t-shirt sales.

About the Speaker(s)

Reed Loden is identified as the President and Lead Organizer for BSidesSF. In this role, he is responsible for overseeing the planning, execution, and overall success of the BSides San Francisco conference, working with a large team of volunteers to bring the community-driven event to fruition. His opening remarks highlighted his deep involvement and commitment to the BSides ethos and the cybersecurity community.