Skip to content

DEF CON 34 talks are here: 354 talks, summarized and searchable.

Browse DEF CON 34

Q&A Keynote

April C. Wright

clipPrivacyTalks5 minBeginnerOpen on YouTube ↗

Where

Talks
CactusCon 9

Duration

5 min

Follows a pre-recorded keynote with a live Q&A on security questions, old online accounts and lasting personal data.

Summary

This live segment followed a pre-recorded keynote by April C. Wright. The host opened by thanking her and running a prize giveaway, then read through audience comments. Viewers responded most to her explanation of where the term doxing came from and to her point that security questions are weak when the answers are facts anyone can look up. Several attendees described their own workarounds, such as inventing answers to security prompts or using unrelated phrases in place of real details. Another commenter mentioned that a professional networking profile can be hidden from search engine results, which they had not known about.

A viewer asked what to do about email accounts and sign-ups made as a teenager and forgotten since. Wright explained that the answer depends on whether the original email address is still accessible. If it is not, the practical route is to contact the service provider directly, supply details about the account and possibly proof of identity, and ask for access to be restored. She stressed that anything posted online tends to persist, and that a service which does not verify identity may keep sending mail to an address the person can no longer control.

The session closed with thanks from the host and a pointer to the next talk on the schedule. The practical takeaways are to treat security question answers as passwords, to avoid answers that can be found in public records or social media, and to review old accounts when access to their recovery email is still available.

Related talks