Skip to content

DEF CON 34 talks are here: 354 talks, summarized and searchable.

Browse DEF CON 34

Integral Theory For Hackers

Sami Kivelä

CommunityTalks25 minBeginnerOpen on YouTube ↗

Where

Talks
Disobey 2024

Duration

25 min

Applies Ken Wilber's integral theory as a thinking lens for hacking, using Wi-Fi and BitLocker examples.

Summary

The talk introduces integral theory, a multi-perspective framework linked to Ken Wilber that is common in management and psychology but rarely discussed in the hacker community. The speaker presents it as a possible thinking tool rather than a complete answer, and cautions against the hype that often surrounds new technologies. The core ideas are sketched out: holons, nested levels running from physical matter through minds, organizations and societies, and the four quadrants covering individual and collective perspectives, each seen from inside and outside.

To test the lens on security, the speaker walks through two public examples. The first is retrieving clear-text Wi-Fi passwords on Windows with a built-in netsh command, and how avoiding endpoint detection changes the approach. The second is a BitLocker bypass that relies on unencrypted communication with the TPM and a cheap logic analyzer sniffer, shown as a path that users and defenders tend to follow as they learn a platform. Each case is mapped onto the quadrants, covering the attacker's own reasoning, the tools and artifacts that get published, group norms, and broader legislation.

The closing argument is that new technology rarely changes everything, and that practitioners benefit from looking at history, psychology and other disciplines, both inward and across fields. The talk is deliberately demo-free and ends with a light joke about discovering that hacking one's own consciousness is the real target.

Related talks

Breaking Ground·43 min

  • BSides
  • Community
  • Date: Aug 2025
  • Location: Las Vegas

Allison Nixon

Traces how the hacker underground shifted from curious tinkering to exploitation, and what the industry should do about it.

threatsociallessons-learned+1