Last August, I gave a Creator Stage talk at @defcon via @cryptovillage.
It stemmed from something I'd noticed again and again in cybersecurity education and advice online: vivid descriptions of risks or issues followed by a series of solutions--but when you scratch beneath the surface, the solutions often wouldn't prevent, address or mitigate the risk.
This is all of those asterisks in one talk.
DEF CON 34 - CPV - Where Standard Cybersecurity Advice Falls Short - Yael Grauer
YouTube
I'm grateful to CPV, to @huertanix for curating my beautiful slides (I thought it'd be bad form to use AI-generated slides for a "art gallery" themed village), and to the many many people who have engaged me in intense conversations on when cybersecurity advice falls short.
Oh and to Cliff Stoll for the green room post-speedy run-through pep talk! <3