For the past 18 months, Jonathan Lampe has been explaining how IT security professionals can use their skills to get a idea of how secure another party is - without actually hacking them. With the 2016 presidential campaign in full swing, Lampe applied these techniques to the web sites of 17 different candidates and came away with some surprising results, including the fact that most of the candidates he surveyed published a full list of all their usernames! This presentation dives into the technical details of Lampe's analysis and allows attendees to discuss where they would draw the line between ""observing very closely"" and outright hacking. A live demonstration of typical candidate site reconnaissance is expected as we look at the current security profile of candidates today.
Lampe has been in software and IT security since 2001. He runs Security Awareness for the InfoSec Institute and is a frequent author.