A Hacker's Guide to Storytelling: Presenting Research that Resonates

A Hacker's Guide to Storytelling: Presenting Research that Resonates

Speakers: Lukasz Gogolkiewicz

Conference: CHCon

YouTube: https://www.youtube.com/watch?v=PX5VG5e70m4

Overview

In the dynamic and often complex world of cybersecurity, the ability to effectively communicate research, findings, and solutions is as critical as the technical work itself. Lukasz Gogolkiewicz's talk, "A Hacker's Guide to Storytelling: Presenting Research that Resonates," at CHCon, delves into the art and science of crafting and delivering compelling presentations in a technical context. This presentation is not about a specific vulnerability or tool, but rather a meta-analysis of how security professionals can elevate their communication skills to ensure their valuable insights truly land with their intended audience.

Gogolkiewicz, drawing from his extensive experience as a conference organizer, speaker coach, and MC, dissects the elements that transform a mere information dump into an engaging, memorable, and impactful experience. He challenges the audience to critically evaluate their own presentation styles, offering practical, actionable advice that spans from initial structural planning to nuanced aspects of stage presence and visual design. The core premise is that regardless of the technical depth of one's research, its true value is unlocked only when it can be clearly understood and appreciated by others, fostering better security practices and informed decision-making across the industry.

The talk is particularly relevant in an era where information overload is rampant, and attention spans are fleeting. For security researchers, practitioners, and leaders alike, mastering the art of storytelling and effective presentation is no longer a soft skill but a strategic imperative. Gogolkiewicz's guide aims to equip the cybersecurity community with the tools to cut through the noise, ensuring their hard-won knowledge not only informs but also persuades and motivates action, ultimately strengthening the collective defense against evolving threats.

Background

▶ Watch: The Hook: Capturing Audience Attention Immediately (0:00)

The cybersecurity landscape is characterized by rapid innovation, intricate technical details, and a constant arms race between defenders and attackers. Consequently, security conferences and internal briefings often feature presentations packed with highly technical information—ranging from novel exploit techniques and reverse engineering methodologies to complex architectural designs and policy frameworks. However, a persistent challenge within this domain is the effective conveyance of this critical information. Many technically brilliant individuals, while experts in their fields, struggle to translate their deep understanding into presentations that resonate with diverse audiences, which can include fellow specialists, management, or even non-technical stakeholders.

This problem stems from several factors. Firstly, there's often an implicit assumption that the sheer technical merit of the research will speak for itself, neglecting the importance of narrative and delivery. Secondly, presenters may fall into the trap of over-explaining every detail, leading to information overload and audience disengagement. The "wall of text" slide, dense code snippets, or monotone delivery are common culprits that transform potentially groundbreaking research into a forgettable experience. Furthermore, the diverse technical spectrum within cybersecurity—encompassing everything from low-level reverse engineers and penetration testers to CISO-level executives and GRC professionals—makes it challenging to craft a message that appeals to all.

Lukasz Gogolkiewicz's background as an organizer for conferences like Bsides Melbourne and Tuscon, coupled with his role as a speaker coach for major events like Black Hat, provides him with unique insights into these systemic presentation shortcomings. He understands that a talk's failure to connect is not necessarily a reflection of poor research but often a failure in its packaging and delivery. His work aims to bridge this gap, recognizing that the "why" and "how" of communication are just as vital as the "what." The talk implicitly addresses the unstated need within the security community for a structured approach to public speaking that goes beyond merely presenting facts, aiming instead to inspire, persuade, and ultimately drive meaningful change.

Key Findings

▶ Watch: Engaging Audiences with Stories, Case Studies, Anecdotes (5:20)

Lukasz Gogolkiewicz's "A Hacker's Guide to Storytelling" doesn't present traditional security findings but rather outlines a comprehensive framework for effective technical presentation, which can be considered its core contributions. The key findings revolve around a structured, audience-centric approach to communication, emphasizing that a presentation is an experience, not just a data transfer.

First, Gogolkiewicz highlights the critical importance of defining the presentation's purpose (inform, instruct, persuade, or motivate) and distilling its essence into a single, concise core message. This foundational step ensures clarity and direction, preventing presentations from becoming unfocused. Closely linked is the necessity of understanding and targeting the audience, acknowledging the vast technical spectrum within cybersecurity. Attempting to appeal to everyone (e.g., reverse engineers and GRC professionals simultaneously) often results in resonating with no one.

Secondly, the talk champions the power of storytelling and connection. Real-life examples, "aha moments" familiar to the audience (like a pentester's late-night breakthrough), case studies, and personal anecdotes are presented as powerful tools to build empathy and engagement. Even in highly technical settings, a well-crafted narrative can make complex information accessible and memorable.

Thirdly, Gogolkiewicz introduces several structural approaches for presentation development, moving beyond a simple linear flow. These include classic beginning-middle-end, problem-solution-evidence-call to action, and chronological structures (ideal for incident response). He also advocates for practical methods like storyboarding (using virtual post-it notes) and recording oneself to refine content and delivery. A notable technique shared from speaker coach Emily Edgely involves mapping objectives to openings and core points, ensuring a cohesive and purposeful narrative.

Finally, significant findings are detailed in the realm of visual design and stage presence. Gogolkiewicz emphasizes controlling the audience's eyes, illustrating the detrimental redundancy effect (John Sweller) where presenting the same information verbally and visually (e.g., a wall of text slide) hinders comprehension. Techniques like animating bullet points and carefully using color and contrast are presented as essential for guiding attention. For stage presence, he covers practical advice on microphone usage (lapel, podium, headset, handheld, and correct holding techniques), managing nerves through understanding brain chemistry (dopamine, oxytocin), and leveraging non-verbal communication such as varied tone, eye contact, controlled pace, and deliberate body language to enhance engagement and emphasis.

Technical Deep Dive

▶ Watch: Controlling Audience's Eyes: Visual Aids & Redundancy (15:00)

While not a technical talk in the traditional sense of exploits or protocols, Gogolkiewicz's presentation offers a deep dive into the technicalities of human communication and cognitive processing as applied to public speaking. He meticulously breaks down the mechanics of audience engagement, visual information processing, and speaker delivery.

A cornerstone of his advice on visual design is addressing the redundancy effect, a cognitive load theory concept attributed to John Sweller. Gogolkiewicz explains that presenting the same information through multiple modalities simultaneously (e.g., reading a dense slide verbatim while speaking) creates cognitive overload. The audience struggles to process both inputs, leading to reduced comprehension and retention. His demonstration vividly illustrates this: a slide with a large block of Python code, while the speaker describes it. The audience is forced to choose between reading the code or listening, often failing at both. The technical solution offered is to control the audience's eyes by strategically revealing information. Instead of a wall of text, key points are animated to appear sequentially, guiding the audience's focus. This minimizes cognitive strain, allowing the spoken word and the visual aid to complement rather than compete.

Further technical considerations for visual aids include color and contrast. In dark conference rooms, high contrast is paramount to ensure readability. Gogolkiewicz demonstrates how a busy slide with poor contrast can scatter audience attention, while a well-designed slide with targeted animations directs focus precisely where the speaker intends. The use of animations and GIFs is also treated with technical precision; while engaging, a looping GIF (like the cat example shown) can be a significant distraction, diverting the audience's attention from the speaker's message to the visual loop. The technical implication is that every visual element must serve a deliberate purpose in supporting the core message, not detracting from it.

The "technical deep dive" extends to the physical mechanics of delivery, particularly concerning microphones. Gogolkiewicz details the characteristics and optimal use of various microphone types:

• Lapel microphones: Offer freedom of movement but are directional; turning one's head away can cause voice loss, forcing the AV desk to chase volume, leading to disjointed audio.
• Podium microphones: Restrict movement entirely, transforming a dynamic presentation into a static lecture. Their directionality means moving away from the mic results in volume drops.
• Headset microphones: Are ideal due to consistent proximity to the mouth, ensuring stable audio levels regardless of head movement. However, their availability is not universal.
• Handheld microphones: Are versatile but require correct technique—holding it close to the chin to maintain consistent input for the AV team. Crucially, the speaker must remember to move the mic with their head if looking at slides.

Beyond hardware, Gogolkiewicz touches on the neuroscience of stage presence. He references research by David JP Phillips on controlling brain chemicals like dopamine and oxytocin to manage pre-presentation nerves. These chemicals, associated with pleasure, motivation, and bonding, can be consciously influenced through specific exercises (though not detailed in the talk), helping to calm anxiety and foster connection with the audience. Smiling, for instance, is presented as a mechanism to release empathy-inducing chemicals in the audience, establishing an immediate connection.

Finally, the technical aspects of multi-speaker presentations are addressed. For duos or trios, successful collaboration hinges on meticulously planned sequence and handoffs. This includes defining who covers what, how transitions occur, and leveraging banter to create a more inclusive, "circle of friends" atmosphere. The critical technical advice is absolute, positive practice together, as independent preparation often leads to disjointed narratives, repeated anecdotes, and a perceived lack of rehearsal, which breaks the audience's immersion. Shared spotlight and avoiding interruption of the active speaker are also emphasized to maintain flow and respect for the narrative structure.

Demo / Proof of Concept

▶ Watch: Overcoming Nerves and Mastering Stage Presence (29:55)

Lukasz Gogolkiewicz's talk is, in itself, a live demonstration of the principles he advocates. Rather than presenting a separate, distinct "demo," he continuously integrates examples and "proofs of concept" into his narrative, illustrating both effective and ineffective presentation techniques in real-time.

One of the most impactful demonstrations involved the redundancy effect. Gogolkiewicz presented a slide featuring a dense block of Python code, simultaneously attempting to describe its function verbally. This "wall of text" served as a live proof of concept for cognitive overload, where the audience was forced to split their attention between reading and listening, inevitably diminishing comprehension. He then contrasted this with a more effective approach: progressively revealing bullet points or highlighting specific lines of code as he spoke, demonstrating how to control the audience's eyes and guide their focus to the relevant information, thereby improving engagement and understanding.

Another key visual demonstration involved the use of color and contrast. Gogolkiewicz displayed a visually busy slide with cluttered information and suboptimal color choices, simulating a common pitfall in technical presentations. He then transformed this into a series of cleaner, progressively revealed points, showcasing how strategic design can make information more digestible and impactful in a dark conference setting. The distracting effect of animations was also proven live, with a looping GIF of a cat playing on a slide while he attempted to speak about a different topic. This immediately pulled the audience's attention away from his words, underscoring the importance of purposeful visual aids.

On the aspect of stage presence and attire, Gogolkiewicz used himself as the proof of concept. He highlighted his choice of a dark suit jacket over a black shirt and dark jeans, explaining how removing the jacket would cause him to "disappear into the background" against the dark stage, losing visual prominence. He also warned against checkered shirts due to the Moyer effect on video cameras, which creates a distracting kaleidoscope-like pattern, a visual artifact he demonstrated with an AI-generated image.

Regarding microphone usage, he physically demonstrated the correct and incorrect ways to hold a handheld microphone, pressing it against his chin to ensure consistent audio pickup, and illustrating how looking away from a podium mic or a lapel mic without adjusting causes immediate loss of voice. He even shared his pre-conference "reconnaissance" process of researching the venue's stage setup and microphone availability (e.g., checking past CHCon videos for headset mics) as a proof of concept for proactive preparation.

Finally, the talk's entire structure, from the opening "hook" and the deliberate use of transition slides (e.g., "This is a check-in slide") to the varied tone, eye contact, and body language, served as a continuous, meta-demonstration of his principles for crafting a presentation that resonates.

Defensive Implications

▶ Watch: The 'Monday Rule': Actionable Takeaways & Critical Thinking (36:40)

While Lukasz Gogolkiewicz's talk focuses on presentation skills rather than direct cybersecurity vulnerabilities or defense mechanisms, its implications for the defensive posture of organizations and the wider security community are profound and far-reaching. Effective communication is a critical, often underestimated, component of a robust security strategy.

Firstly, improved presentation skills enable clearer threat intelligence dissemination. Security analysts and threat hunters frequently uncover complex threat actor behaviors, novel malware, or emerging attack vectors. If these findings are presented poorly—with dense slides, jargon-filled explanations, or a lack of narrative—their urgency and impact can be lost. A well-structured, engaging presentation ensures that critical threat intelligence is not only understood by fellow technical teams but also by leadership, enabling faster, more informed decision-making regarding resource allocation, patch prioritization, and strategic defense initiatives. This directly translates to a more agile and effective defensive posture.

Secondly, better communication fosters stronger security awareness and training programs. Persuading employees to adopt secure behaviors is a constant battle. A security awareness professional who can tell a compelling story, use relatable examples, and avoid information overload is far more likely to influence user behavior than one who delivers a monotonous, fact-heavy lecture. Gogolkiewicz's emphasis on defining purpose (persuade, motivate), understanding the audience, and using storytelling techniques directly empowers security awareness teams to craft messages that resonate, leading to a more security-conscious workforce—a vital line of defense against social engineering and phishing attacks.

Thirdly, the ability to present research effectively enhances incident response and post-incident analysis. During a security incident, communicating the sequence of events, the impact, and the remediation steps to diverse stakeholders (technical teams, legal, PR, executives) is paramount. A chronological structure, as highlighted by Gogolkiewicz, is particularly effective here, allowing incident responders to clearly articulate the timeline from initial compromise to containment and eradication. Post-incident, clear presentations of lessons learned can drive essential improvements to security controls and processes, preventing recurrence.

Finally, from a broader perspective, skilled presentation elevates the entire cybersecurity profession. When researchers can articulate their discoveries with clarity and impact, it increases the visibility and perceived value of security work. This can lead to increased funding for research, better recruitment into the field, and a stronger voice for security professionals in boardrooms. By making complex technical topics accessible and engaging, the community collectively strengthens its ability to educate, influence, and innovate, ultimately building a more resilient digital world. In essence, the defensive implication is that better communication skills act as an organizational force multiplier, enhancing every aspect of the security lifecycle from prevention and detection to response and recovery.

Key Takeaways

• Define Your Purpose and Core Message: Before crafting any presentation, clearly establish whether you aim to inform, instruct, persuade, or motivate, and condense your entire message into a single, concise sentence.
• Know and Target Your Audience: Understand the diverse technical spectrum of your audience and tailor your content and language to resonate with one or two specific segments, avoiding the trap of trying to appeal to everyone.
• Embrace Storytelling and Connection: Leverage real-life examples, relatable "aha moments," case studies, and personal anecdotes to build empathy and make complex technical concepts more engaging and memorable.
• Master Visual Design for Cognitive Load: Actively control the audience's eye movement through strategic slide design, avoiding dense "walls of text" and distracting animations. Utilize techniques like progressive disclosure and high-contrast visuals to reduce cognitive load and enhance comprehension, following principles like the redundancy effect.
• Refine Your Stage Presence and Delivery: Practice relentlessly, manage nerves by understanding brain chemistry, and consciously employ varied tone, direct eye contact, controlled pace, and deliberate body language to emphasize points and maintain audience engagement. Be familiar with and correctly use various microphone types.
• Practice and Rehearse Rigorously: Record yourself, present to a target audience member for feedback, and meticulously time your presentation. For multi-speaker talks, always practice together to ensure seamless handoffs and a cohesive narrative.

About the Speaker(s)

Lukasz Gogolkiewicz is a highly experienced and respected figure within the cybersecurity conference circuit, known for his deep involvement in fostering community and improving presentation quality. He is a dedicated organizer for Bsides Melbourne and Tuscon, jokingly referring to the latter as "the most disorganized conference in the country," which speaks to his hands-on experience in the challenging world of event management. Beyond organization, Gogolkiewicz serves as a speaker coach for prominent conferences such as Black Hat and Bsides, where he guides researchers in refining their talks to achieve maximum impact. His expertise also extends to being an MC at numerous conferences worldwide, a role that further hones his understanding of audience engagement and stage dynamics. His diverse background provides him with a unique, 360-degree perspective on what makes a technical presentation truly resonate.