Trey Ford: Testing, notification should not be criminalized
Black Hat's former General Manager Trey Ford took the stage at informal conference Security B-Sides San Francisco today to present "Legislative Realities," a compelling talk on identifying and bridging the gaps between hacking, user security, company security and legislation.
Mr. Ford told SC Magazine in a recent interview,
I love the purity of Security B-Sides, it has a special place in my heart. Conversations and presentations at B-Sides events are unique – they are timely, important, unconventional and unapologetically direct – which means they are often inappropriate for other venues.
(...) The legislation impacting information security should be something everyone in the industry watches closely, and it's a priority for us at Rapid7.
We need to see legislation achieve a balance of protection for researchers, clear guidelines for corporate due care, and simple definitions for criminal and malicious acts.
Ford is now the Global Security Strategist for Rapid7, and appears to be taking his wealth of experience running Black Hat, and experiences such as wrangling the NSA's General Alexander while simultaneous advocating for security researcher protections, and applying it to legislative changes.