Main content

BBC Tech Meetup - 02/12/20 - Social Engineering, Shopping Tips, and Secure Design

The Talks

Social Engineering - Understanding and preventing "people hacking" - Jenny Radcliffe

Up to 95% of all "cyber" breaches can be attributed to human error or manipulation a practice known as Social Engineering. In this talk, lifelong ethical con-artist and lifelong social engineer, Jenny Radcliffe, will discuss how social engineers "hack the humans" in order to breach organisations, scam individuals and steal victims' money, identity and peace of mind. She will discuss the psychology and methodology of the practice and give examples of social engineering from the media as well as from her own long career simulating criminal attacks. Finally, we'll look at how the pandemic crisis has been incorporated into the narrative of scams and cons of all kinds, and look at advice and tips on how to prevent yourself and your organisation from becoming a victim too.

Jenny Radcliffe is a world renowned Social Engineer, hired to bypass security systems through a no-tech mixture of psychology, con-artistry, cunning and guile. A "burglar" for hire, she has spent a lifetime talking her way into secure locations, protecting clients from scammers, and leading educational simulated criminal attacks on organisations of all sizes in order to help secure money, data and information from those with genuine malicious intent.

Hot tips to sidesteppin' cyber hell this holiday season - Carole Theriault

These holidays will be unlike any other we’ve experienced. How we try to make up for this - through frequent video calls, online deal hunting, sending heartfelt messages, buying “smart” toys and devices - might help us feel less apart this holiday season.

But thing is, they all rely on technology, so let’s talk about specific security-minded tips and behaviours to help us all sidestep unwanted cyber-related dramas this holiday season.

Carole Theriault has been the infosec and tech world for 20 years (conservative estimate). Since 2013, she’s run Tick Tock Social, a specialist technology communications consultancy, from Oxford, UK.

She is a producer and co-host on the popular Smashing Security podcast, producer and host of the brand new Sticky Pickles podcast (a pandemic escape!), and a regular interviewer for US-based Hacking Humans podcast.

Prior to founding her own firm, she spent more than a decade at cybersecurity firm Sophos, where she launched and ran the award-winning Naked Security blog. And to this day, she still loves a steaming-hot old-fashioned sugar doughnut. (Or two).

Protecting our most valuable asset - Ian Arundale

An insight into the BBC iPlayer and Sounds journey to building audience facing features that are secure by design.

Ian Arundale is a Senior Technical Architect at the BBC with 10+ years experience in the broadcast/media industry building products that are used by millions of users per week including BBC iPlayer, BBC Sounds and broadcast interactive services such as the Red Button text service on digital TVs.

In this talk Ian will discuss the ongoing journey of understanding the security position of a technical estate as large as iPlayer and Sounds and how to build security into agile software development workflows that deploy multiple times a day.