Sarah Young
where else to find them
no profile links on file
what they talk about
all 8 in the filters
where they keep going back
- BSidesSF2 editions2019–2020
all 10 in the filters
on a stage with
never shared a talk
who talks about the same things
- Aaron Bedra14 talks
- Laura Bell13 talks
- Duffie Cooley18 talks
- Siren Hofvander5 talks
- Jimmy Mesta7 talks
- Alyssa Miller12 talks
| title | conference | date |
|---|---|---|
| How to win friends and influence your security team | NDC Melbourne 2025 | 2025-04-29 |
Security vs devs becomes cooperation when incentives and language align, not slogans. Attack services are cheap: ransomware kit $66, spearphishing $100–$1,000… | ||
| Nerds on a plane: what we can learn from the aviation industry | CPH DevFest 2024 | 2024-08-26 |
Draws concrete parallels: aviation uses the Swiss Cheese model and formal Aviation Safety Management Systems, publishes black boxes public reports, and reduced… | ||
| Panda to gibbon is the least of your worries: why securing AI is not what you think | NDC Security 2024 | 2024-01-09 |
Argues that most AI risk comes from normal security failures not magic attacks, cites the panda to gibbon adversarial example (57.7%→99.3%), and says 98% of… | ||
| DataEngBytes 2023 - MEL-T3-04 - Sarah Young | DataEngBytes Melbourne 2023 | 2023-08-31 |
Explains a hardware root exploit in the Tegra X1 that uses shorting joy‑con pins to force a recovery boot, then a buffer overflow overwrites signature check… | ||
| Emerging threats against cloud application identities and what you should do about it | NDC Oslo 2023 | 2023-05-22 |
Workload identities are an increasing attacker target: 34% of orgs report incidents from malicious applications, 26 million logins leaked, and 74% unaware of… | ||
| Architecting a secure cloud framework | NDC Oslo 2023 | 2023-05-22 |
Cloud security focuses on concrete controls: use CSPM scans across multi‑cloud estates and SIEMs like Splunk/Sentinel for correlation, enforce Landing zones… | ||
| Security Advocacy Shouldn't Be for Security Professionals: How the Industry Misses the Mark... | Black Hat Asia 2023 | 2023-05-09 |
Analysis of 200 pieces of content scores vendor, nonprofit and indie materials on a score out of six that checks plain language, no assumed knowledge, clear… | ||
| Collection is not Detection - Sec Ops in a Cloud Native Environment | Cloud Native Security Day Europe 2020 | 2020-08-17 |
Claim: collection is not detection — collecting all logs without detections or hunts wastes effort. Recommend collecting across the whole stack (orchestrator… | ||
| Hanging on the Telephone: Hacking VoIP | BSidesSF 2020 | 2020-02-23 |
History of phone hacking traces from Captain Crunch whistles and blue boxes to modern SS7 exploits, but practical risks are current: IP phones register with a… | ||
| How to lose a container in 10 minutes | PyCon AU 2019 | 2019-08-02 |
Claim: spinning up containers and k8s clusters and leaving them exposed will get them pwned quickly. Experiment actually spins real containers on a cloud host… | ||
| How to Lose a Container in 10 Minutes | BSidesSF 2019 | 2019-03-03 |
Claims common cloud/container mistakes: default Kubernetes configs expose APIs and dashboards, secrets sit in etcd base64 and aren’t encrypted, and public… | ||
| Don’t be a fail whale, secure your containers | Container Camp UK 2018 | 2018-09-06 |
Covers container-specific threat modeling and concrete controls: follow the NIST container hardening note (~10 pages) and the CIS benchmark via Docker Bench… | ||
| nothing matches | ||