This page contains descriptions of presentations I have given, as well as links to content from the talks.
Python: Because Sometimes, The Most Useful Tool Is The Ability To Make Your Own
Python is a high-level language, good for both scripting and full-fledged application development, with a rich selection of standard and add-on library modules. It is designed for clear and readable code. This combination of intuitive syntax and a wide range of available modules makes it useful for quickly and easily writing tools tailored to your specific problems. This talk covers the basics of programming in Python, and provides an introduction to several modules that are useful in developing security scripts. It includes both modules from the standard library, as well as Mechanize (a web browsing module) and Scapy (a custom packet creation module).
I gave this presentation on April 28, 2012 at Security B-Sides Chicago.
Presentation Slides in PDF format
Presentation Slides in .odp format
Code That Sounds Good: Music Theory and Algorithmic Composition
Whether you are interested in using code to develop or adapt musical ideas, turn mathematical functions or data into music, or generally explore the intersection of music and programming, this talk will give you a place to start. This talk will introduce you to what algorithmic composition is, what free and open source frameworks exist for algorithmic composition, and some basic concepts of music theory that are important for composing music with code. Then, it will delve into creating algorithms to explore existing musical forms, as well as creating algorithms to make music out of statistical data. You will both see how the programs are structured, as well as hear the music generated by the code. Code examples are in Python, but music theory and programming concepts will be explained in a language-independent way, so you can apply the concepts in any programming language or algorithmic composition framework.
I gave this presentation on April 13, 2012 at Notacon 9.
Full Video of Presentation, on irongeek.com
Presentation Slides in PDF format
Presentation Code in .zip archive format
From Microcontroller to Maestro: Music on the Arduino
The Arduino microcontroller is a versatile platform for making music. There is a host of ways to do musical projects on an Arduino--from pulse width modulation requiring nothing more than an Arduino board and a speaker, to MIDI, to sampling. Even if you've never picked up an Arduino before, this talk provides a roadmap of the techniques that exist for creating music with an Arduino. This talk should get you well on your way to making yours as loud and obnoxious as possible...or as sweet and consonant as possible, if that's your thing.
I gave this presentation on May 1, 2010 at Penguicon 8.0.
Presentation Slides in Open Document format
Presentation Slides in PDF format
Download my code, and see links to other Arduino music resources
Hey, Don't Call That Guy a Noob: Toward a More Welcoming Hacker Community
The hacker community strives to develop and exchange cutting-edge ideas. A key component of achieving that goal is continuing to involve new people in the community, since they can add fresh perspectives from which to view any kind of hacking. However, either because of the perception of the hacker community as something secretive or because of nervousness about interacting with people who are supposedly more knowledgeable, it can be a daunting experience for someone new to get involved and stay involved in the community. This talk aims to make people in the hacker community aware of the concerns that people new to it face, and provide concrete steps for building a culture of making new people feel welcomed and valuable.
I gave this presentation on April 16, 2010 at Notacon 7.
Presentation Slides in Open Document format
Presentation Slides in PDF format
I also gave an updated version of this presentation on July 17, 2010 at The Next HOPE.
Setting Up FDCC Testing Environments on Non-Windows Systems
The National Institute of Standards and Technology maintains the Federal Desktop Core Configuration, an approved configuration of Windows on federal computers. In order to facilitate IT staff in performing security tests on programs in the FDCC-mandated environment, the federal government collaborates with Microsoft to release virtual machines of Windows XP and Windows Vista. Since these are released into the public domain, anybody can download these virtual machines, run them, and use them however they wish. Since they are disseminated in Windows Virtual Hard Drive format, they can be a little tricky to run on non-Windows systems. This talk gives an overview of what the FDCC is, why it is helpful, and how to get FDCC virtual machines to run on your non-Windows machines.
I gave this talk in a Pecha Kucha (20 seconds per slide) format on December 4, 2009 at Pecha Kucha x Pumping Station: One. I gave a longer version of the talk, using the same slides, on December 12, 2009 at Neighborcon NYC.
Presentation Slides in Open Document format
Presentation Slides in PDF format
Hackerspaces: The Legal Bases
Hacker communities in many cities are becoming interested in starting hackerspaces. Getting together a core of talented, inquisitive, and creative people is an integral part of it, but it is also important to address the legal questions that arise. The goal of this presentation is to make anyone interested in hackerspaces aware of the most likely legal issues to arise, and to equip them to ask the right questions. The subjects discussed in the presentation include choosing an organizational structure, specific benefits and concerns that arise if a hackerspace is organized as a nonprofit, zoning and leasing issues that arise when finding a physical space, and managing liability in order to protect officers, directors, members, and guests alike.
I gave this presentation on August 2, 2009 at DEFCON 17.
Presentation slides in Open Document format
Presentation slides in PDF format
Presentation Video
Presentation Audio
Feathers Will Fly Panel
The idea of the Sec-xy Pillow Fight at DEFCON 17 sparked a lively debate about feminism in the information security industry. There needed to be a public debate about the benefits and drawbacks of different ways of addressing the gender divide in security, both with respect to how women present themselves in the field as well as how the field as a whole should adapt to be more welcoming to gender diversity. The panel was moderated by Erin Jacobs, and Leigh Hollowell, Leigh Honeywell, Magen Hughes, Jennifer Jabbusch, and Stacy Thayer joined me in the discussion.
I participated in this panel on July 30, 2009 at Security B-Sides Las Vegas.
Panel audio in .mp3 format
Video is forthcoming.