Locknote: Conclusions and Key Takeaways

on YouTube ↗52m

" summary

Review board members describe spending dozens of hours (one estimates ~30) vetting submissions and note 14 talks from Microsoft and Google and a joint BMW–Tencent remediation that proves vendor collaboration can work. Hardware research and academic papers increase noticeably; machine learning submissions are common but often under‑tested, while adversarial‑ML shows promise. Cloud adoption shifts threat models to providers, embedding pen testers in dev sprints yields faster fixes, and adoption of security.txt remains tiny (<1%).

AI-written summary · about

" chapters (14)

1. 0:00Introduction
2. 3:33New kid on the block
3. 5:23Submission process
4. 9:22Vendors
5. 10:48Transparency
6. 12:36Security
7. 17:41Offensive Security
8. 20:30Threat Intelligence
9. 23:12Edge Cases
10. 28:28Vendor Transparency
11. 31:17Hope
12. 37:32Complexity
13. 40:27Security by Design
14. 45:04Cultural Differences

" related talks

• 48mLocknote: Conclusions and Key Takeaways from Black Hat Europe 2018Jeff Moss · Black Hat Europe 2018
• 51mLocknote: Conclusions and Key TakeawaysChris Wysopal, Dino Dai Zovi, Jeff Moss, Vincenco Iozzo · Black Hat Asia 2016
• 30mLocknote: Conclusions and Key Takeaways from Day 1Jeff Moss, Meadow Ellis, Stefano Zanero, Sharon Conheady, Matt Suiche · Black Hat Europe 2022
• 47mLocknote: Conclusions and Key Takeaways from Black Hat Asia 2022Vandana Verma Sehgal, Jeff Moss, Ryan Flores, Stefano Zanero, Lidia Giuliano · Black Hat Asia 2022
• 44mKeynote: 25 Years in AppSec: Looking Back, Looking ForwardAdam Shostack · Global AppSec US 2021 Virtual
• 44mLocknote: Conclusions and Key Takeaways From Black Hat Europe 2017Jeff Moss, Andreas Lindh, Shawn Moyer, Sharon Conheady · Black Hat Europe 2017
• 44mSecurity Lessons for Early AdoptersPooja Shah · BSides Edmonton 2025
• 56mKeynote: AppSec: From Outsiders to AlliesChris Wysopal · OWASP 20th Anniversary 2021