DCSG1 - Where's our Hats: The founding of N0H4Ts  - Pengfei Yu, Zara Teo

DCSG1 - Where's our Hats: The founding of N0H4Ts - Pengfei Yu, Zara Teo

Source: YouTube · DEFCONConference · published Sep 30, 2026 · 44:00

Cybersecurity
No ratings yet Log in to rate
Transcript Available
Description

BLUF: No Hats evolved from a student CTF club into a Singaporean cybersecurity community focused on solving the industry-wide "exposure shortage" through flagship events like STACON and Cyber League, relying on a unique flat-hierarchy structure and complementary leadership to sustain growth. 2:15 11:15 26:45

Key Takeaways:

  • Origin and Philosophy: Founded initially as a student club at the Singapore Institute of Technology, the name "No Hats" began as a pun on the lack of "black hats" but evolved into a philosophy of approaching cybersecurity with an open mind, free from predefined specializations or prejudices. 3:10
  • Identifying the Core Problem: The community realized that the cybersecurity industry suffers not from a talent shortage, but from an "exposure shortage," where educated individuals lack practical insight into real-world roles and career paths. 11:00
  • Strategic Pivot: To address this, No Hats shifted its mission from serving only students to providing broad exposure for professionals and career switchers, transforming its flagship conference (STACON) into an event designed to spark interest and practical application. 11:30 25:30
  • Flagship Events: The community created Cyber League, a "watchable" CTF competition styled like esports to make cybersecurity exciting for audiences, and maintains monthly meetups to foster continuous learning and networking. 23:30
  • Sustainable Structure: No Hats utilizes a semi-tiered, flat hierarchy where specialists own their domains while the leader acts as a generalist, ensuring decisions flow down but execution is decentralized, preventing bottlenecks. 19:30 30:00
  • Leadership Dynamics: Effective community building requires a leader to find a deputy who complements their weaknesses (e.g., a task-driven leader pairing with a people-driven deputy) and to prioritize "feeling management" by addressing team emotions before executing decisions. 33:50 38:15

Closing Statement: No Hats demonstrates that successful community growth relies on adapting to real industry needs, fostering genuine ownership among members, and balancing operational efficiency with empathetic leadership to maintain a healthy team culture.

Sources:

  • 2:15 Discussion on the origin of the No Hats name and its pun-based roots.
  • 11:00 Identification of the industry's core issue as an exposure shortage rather than a talent shortage.
  • 26:45 Overview of the transition from a student club to a broader community focus.
  • 30:00 Explanation of the organizational structure distinguishing specialists from generalists.

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 0.5 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

some. All right, once again, please join me in welcoming Punfe and Zara. Today they will be delivering the talk titled Where's Our Heads? The Founding of No Heads. And without further ado, I'll pass the time over to Punfe to kick off the talk. >> Hey guys. Yeah, I'm uh Actually, I can't hear myself. So, if you guys can't hear me, can you guys hear me? Yeah, all right, great. Yeah, so well, uh I have to say uh taking a shot has not been my strongest suit and every ever since the first shot I took when I was back in uh Def Con 2022, uh it's always been making more me more nervous than actually helping me to calm down. So, if I stumble, just bear with me, please. Yeah. So, today, um this talk is something that's very different. It's not something I've ever given before. It's what we're going …