This session is for members.

Subscribe or log in to watch every GoSec session.

Subscribe Log in

This recording is not available yet.

Evolving from Cyberpunk to Solarpunk: Actionable Guidance from hacker for hope into the future

Download resources

About this session

Michael Goetzman, a Wisconsin-based security leader who was previously CISO at Master Lock and head of security for the Americas at Cushman and Wakefield, argues that cyberpunk as a hacker identity has run its course and proposes solarpunk, decentralized, nature-integrated technology built for community abundance rather than corporate control, as a more useful North Star. He grounds this in practical IoT product-security lessons from manufacturing padlocks and smart-building systems: get PCB design and power efficiency right from the start since retrofitting is nearly impossible, budget for supply-chain volatility, stress-test devices physically before mass production, plan end-of-life and failure states, and expect cost pressure and patchwork regulation to push teams toward cutting corners unless leadership is held accountable. He recommends hiring passionate hobbyists, running private bug bounties, and building security culture by making the work genuinely fun, such as sending staff to DEF CON, rather than mandatory. He closes with household examples, power-monitoring sensors, a water-leak shutoff device, and rooftop solar panels, as concrete ways individuals can start decentralizing their own energy use, and lists right-to-repair and light pollution as extensions of the same philosophy.

Key takeaways

  • Get PCB design and power-efficiency decisions right at the very start of an IoT device's development; mistakes made there are extremely costly or impossible to fix once the product ships.
  • Physically stress-test hardware before mass production (his team found a padlock that popped open on the first crowbar hit due to a metal choice) rather than relying only on paper specs.
  • Plan a device's end-of-life and failure state deliberately, including what happens to a networked lock or embedded sensor when its battery or connectivity eventually fails.
  • Build a genuine security culture by making the work rewarding for engineers (sending team members to a hacker conference, running internal bug bounties) rather than only mandating compliance training.
  • Start decentralizing personal or organizational energy and data dependence with low-cost, incremental steps, such as a home power-monitoring sensor or a leak-detection shutoff, before committing to larger investments like solar panels.

Speakers

Michael Goetzman
Michael Goetzman
CISO · Solano

Hacker

Resources

Tags

More from GoSec 2023

Also from Michael Goetzman

On the same topic

This site is registered on wpml.org as a development site. Switch to a production site key to remove this banner.