BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//hack-lu-2026//speaker//LXFK9P
BEGIN:VTIMEZONE
TZID:Europe/Luxembourg
BEGIN:DAYLIGHT
DTSTART:20251021T000000
TZNAME:CEST
TZOFFSETFROM:+0200
TZOFFSETTO:+0200
END:DAYLIGHT
BEGIN:STANDARD
DTSTART:20251026T030000
RDATE:20261025T030000
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20260329T030000
RDATE:20270328T030000
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
SUMMARY:Bolting on security is the best we can [generally] do\, so grab a 
 wrench - Jacob Torrey
DTSTART;TZID=Europe/Luxembourg:20261021T170000
DTEND;TZID=Europe/Luxembourg:20261021T173000
DTSTAMP:20261009T050056Z
UID:pretalx-hack-lu-2026-EPWMGF@pretalx.com
DESCRIPTION:We all know the adage that security should be built-in\, not b
 olted on. This would work great if our threat models perfectly reflected r
 eality\, and adversaries never adapted. Sadly\, the real-world doesn't fit
  into a neat specification and design document\, and adversaries alter the
 ir tactics. When looking at cyber-security as a dynamic game\, defenders m
 ust adapt to survive--bolting on security is the only way to circumvent ne
 w attacks or stymie adversaries.\n\nRegardless of how much faith you put i
 nto the fear-mongering AI hype machine\, we've all seen the world we work 
 in shift\, and designing for easier updates\, changes\, and enhancement wi
 thout impacting UX is the way forward. My entire career has been spent add
 ing in security after-the-fact\, so join me as I:\n- Explore the reasons s
 ecurity is hard and cannot be solved\n- Highlight wins where security has 
 been added after the fact\n- Look at how designing for future security aug
 mentation helps our future selves bolt-on security more quickly\n- A few a
 reas where security can be designed in\, and how lumping those areas with 
 general cyber-security harms their outcomes
LOCATION:Europe
URL:https://pretalx.com/hack-lu-2026/talk/EPWMGF/
END:VEVENT
END:VCALENDAR