
DEF CON 32 - Counter Deception: Defending Yourself in a World Full of Lies - Tom Cross, Greg Conti
Source: YouTube · DEFCONConference · published Oct 22, 2024 · 42:52
The internet has become a pervasive engine of deception, exploiting human biases and cognitive limitations to manipulate perception and behavior, operating at all levels from social media to AI and malware. Counter-deception requires disciplined analysis, skepticism, and technical tools to detect and resist false narratives.
Key Takeaways:
• The internet reinforces preexisting beliefs through targeted narratives, creating a "funhouse mirror" effect that validates users' egos rather than challenging them 12:02-12:25.
• Deception exploits psychological principles like "McGruder’s Principle" (it's easier to maintain a belief than change it) and human sensory limits, such as in self-driving car exploits or inflatable tanks in WWII 13:00-14:29.
• Counter-deception strategies include intelligence collection, disruption of adversary capabilities, analytical scrutiny, and devil’s advocacy to test assumptions 19:00-20:10.
• Tools like backlinking, expert curation, and LLMs can verify truth by exposing hidden biases and missing facts in narratives 36:00-39:00.
We must build technical, cultural, and educational tools to counter the internet’s deceptive nature by fostering critical thinking and reliance on objective data sources.
Sources:
- 12:02 Discussion on belief reinforcement and the "funhouse mirror" effect in social media.
- 13:00-14:29 Explanation of deception principles like exploiting human limits and the "Jones’s Dilemma" of narrative quantity.
- 19:00-20:10 Counter-deception strategies including intelligence, disruption, and devil’s advocacy.
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
uh good morning Devcon thanks for coming out appreciate it uh we have two speakers this morning uh Tom cross and Greg KY and their talk is going to be on deception and counter deception please give them a good Devcon welcome so uh good morning everyone Thanks for uh making it out this morning um so we're uh we're excited about this talk um I uh I I've been coming to Defcon you know since it got started and when um you know early Defcon uh you know at that time the internet was just beginning to become publicly available um to Consumers right and we were thinking about you know what what how is the Internet going to affect society like how what is going to happen right um and we were sort of imagining a world that we now live in today and I think it's interesting to look back at how what we…