The talk · hack::soho, IOActive London, 29 October 2026

The ultimate insider

Agents, the infrastructure that cannot hold them, and risk management that cannot keep up. 17 slides, planned at 38 min 30 s. Each slide is a web page that animates; open one to start the player there, and press P in the player for the presenter view.

Status: first pass, site v0.1.4: the structure, the slides and a draft script from the article; to be rehearsed and cut.

1. 1. The ultimate insiderOpening
2. 2. Three known problems, one storyOpening
3. 3. A threat is anything that causes business impactAct one: the insider
4. 4. A reasoning engine in a loop, with toolsAct one: the insider
5. 5. Five public incidents, three of them not attacksAct one: the insider
6. 6. 82 machine identities for every humanAct one: the insider
7. 7. Built for code that stays where you put itAct two: the infrastructure
8. 8. The grant is everything the role accumulatedAct two: the infrastructure
9. 9. It falls over on its ownAct two: the infrastructure
10. 10. Risk management at the speed of spreadsheetsAct three: the spreadsheet
11. 11. Why we do not see more of itThe turn
12. 12. The collisionThe turn
13. 13. The way outThe way out
14. 14. Reach, mandate, the gap, and what stands in itThe way out
15. 15. A licence to operate, that can be suspendedThe way out
16. 16. Live demos, all open sourceLive demos
17. 17. Brakes are what let a car go fastClose