What We Do in the Shadows
summary
Claims that blanket bans fail and that personal AWS accounts, Dropbox or Google Drive shares, WhatsApp groups and a free official Slack instance are common shortcuts; shadow infrastructure bypasses controls and becomes a security team’s nightmare. Evidence: prohibition’s 18th Amendment is repealed in 1933 as an analogy for unintended consequences. Proposes measuring desire paths, treating policies as living documents, and replacing blunt bans with collaborative fixes that patch specific workflows rather than outlawing them.
AI-written summary · about
chapters (18)
- 0:00Introduction
- 2:00What is Shadow IT
- 3:17What is Shadow Infra
- 4:06Prohibition
- 5:00The noble experiment
- 5:48The 1920s
- 6:36Frustration
- 7:21User Experience
- 10:50Data
- 11:58Security
- 13:05Policy
- 14:06Feminists
- 15:18Women of the time
- 16:19Workplace politics
- 17:21Solutions are always broken
- 18:05Shadow IT isnt just one problem
- 19:00Ongoing maintenance issues
- 20:22Conclusion
related talks
25mEverything Old Is New Again: Legal Restrictions on...
50mThe Big Chill: Legal Landmines that Stifle Security Research and How to Disarm Them
12mWho is the IT Department Anyway: An Evaluative Case Study of Shadow IT Mindsets Among
31mDishonest Software: Fighting Back Against the Industry Norms
36mKeynote – James Vasile
01h 02mWeaponizing Technology: Examining the Importance of Privacy...
48mThreats Inside the Darkverse: The Shadowy Underbelly of the Metaverse
40mThe Mechanisms That Enable Misuse and What We Can Do About It