Survival Tips for Women in Tech (JavaZone 2019)

@pati_gallardo
Turtle
Sec
@pati_gallardo

@pati_gallardo
If I was a guy
I’d now tell you about my family and hobbies,
and show pictures of cute dogs and kids
2
META
@pati_gallardo

@pati_gallardo
But I’m not a guy, so…
instead
I’m going to show you pictures of
assembly
so that you might take me seriously
3

@pati_gallardo
$ hello
wargames$ objdump -d shellcode | grep -A 30 "<__libc_open>:"
00000000004490f0 <__libc_open>:
4490f0: 48 83 ec 68 sub $0x68,%rsp
4490f4: 41 89 f2 mov %esi,%r10d
4490f7: 64 48 8b 04 25 28 00 mov %fs:0x28,%rax
4490fe: 00 00
449100: 48 89 44 24 28 mov %rax,0x28(%rsp)
449105: 31 c0 xor %eax,%eax
449107: 41 83 e2 40 and $0x40,%r10d
44910b: 48 89 54 24 40 mov %rdx,0x40(%rsp)
449110: 75 4e jne 449160 <__libc_open+0x70>
449112: 89 f0 mov %esi,%eax
449114: 25 00 00 41 00 and $0x410000,%eax
449119: 3d 00 00 41 00 cmp $0x410000,%eax
44911e: 74 40 je 449160 <__libc_open+0x70>
449120: 8b 05 e6 36 27 00 mov 0x2736e6(%rip),%eax
449126: 85 c0 test %eax,%eax
449128: 75 61 jne 44918b <__libc_open+0x9b>
44912a: 89 f2 mov %esi,%edx
44912c: b8 01 01 00 00 mov $0x101,%eax
449131: 48 89 fe mov %rdi,%rsi
449134: bf 9c ff ff ff mov $0xffffff9c,%edi
449139: 0f 05 syscall
%rax # System call %rdi %rsi %rdx %r10
0x101 257 sys_openat int dfd const char * ﬁlename int ﬂags int mode
@pati_gallardo 4
From my talk last week at NDC
TechTown called
“The Anatomy of an Exploit”

@pati_gallardo
Turtle
Sec
Patricia Aas - Trainer & Consultant
Currently : TurtleSec
Previously : Vivaldi, Cisco Systems, Knowit, Opera Software
Master in Computer Science - main language Java
Pronouns: she/her
“Is she your
secretary?”
“Of course she
has pronouns”
C++ Programmer, Application Security
Macho, high credibility
Big Name
credibility
Lending Privilege

@pati_gallardo
6
The stages of acknowledging
systems of oppression
(or the ﬁve stages of grief)
denial acceptancebargaininganger depression

@pati_gallardo
7
“I was raised to believe we are all equal,
this can’t be true!“

@pati_gallardo
8
“If this is true,
then this is the natural order of things!”

@pati_gallardo
9
“Ok, it might be true,
but is it really that bad?
What about...”

@pati_gallardo
10
“It’s true, and it’s everywhere!
This is so ingrained and it’s impossible to ﬁx!”

@pati_gallardo
11
“It’s true,
and I can’t sit by and do nothing.”

@pati_gallardo
Turtle
Sec
Survival Tips
For Women in Tech
Patricia Aas
JavaZone 2019

@pati_gallardo
13
“Who else is the only woman
on their dev team?”
@erinfoox Sept 5th 2018

@pati_gallardo
14
Apparently I
had 24...

@pati_gallardo
15
@pati_gallardo
Today with
some
bonus tips

@pati_gallardo
16
Purl, Pixar @pati_gallardo
But ﬁrst I want to talk about Purl, a Pixar short on
YouTube that I hope you all watch after this talk

@pati_gallardo
17
Purl, a pink ball of yarn, got a new job, at a Bro ﬁrm

@pati_gallardo
18
Being different isn’t always easy, blending in is a relief

@pati_gallardo1
19
Don’t try to be
“one of the guys”
you’ll never be
able to bring your
full self to work. Purl, Pixar
@pati_gallardo

@pati_gallardo
20
Invisibility*
Treat the Less Powerful as
if they are invisible by
ignoring them
*De fem hersketeknikker (Maﬆer suppression techniques),
professor Berit Ås
Invisibility is common in
workplace bullying

@pati_gallardo
21
Appropriation
The Powerful person
steals the ideas of the
Less Powerful person
For Appropriation to work the target has to be invisible

@pati_gallardo
22
@pati_gallardo
2
Document all your work.
It’s Hard to Steal Credit for Public Work.

@pati_gallardo
23
@pati_gallardo
3
HR is not your friend

@pati_gallardo
24
@pati_gallardo
4
Avoid everyone who
is really enthusiastic
about you being a woman.

@pati_gallardo
25
@pati_gallardo
5
Leave functions before
your colleagues are drunk.
Neither you nor them
want you to know
their inner thoughts

@pati_gallardo
26
@pati_gallardo
6
Try to convince yourself
when you begin to doubt yourself:
“It’s n me, it’s them”

@pati_gallardo
27
@pati_gallardo
7
On Bad Days try to lose yourself in the work,
try to remind yourself why
you’re in this business

@pati_gallardo
28
@pati_gallardo
8
Find good people and bake them cakes
just for being great people.
Great people should get cake.

@pati_gallardo
29
@pati_gallardo
9
Make lunch dates
with other women in tech.

@pati_gallardo
30
10
If you have a great idea,
call a meeting
and send out your slides in advance
(See Hard To Steal Public Work)
@pati_gallardo

@pati_gallardo
31
@pati_gallardo
11
If you have a great idea,
make a demo.
Hard To Argue With Running Code

@pati_gallardo
32
@pati_gallardo
They won’t listen if they can tell
you’re angry

@pati_gallardo
33
@pati_gallardo
12
Never participate in
any “team-building” activity
that involves you dressing differently

@pati_gallardo
34
@pati_gallardo
13
Don’t be afraid to quit.
Don’t sacriﬁce your mental health
for Bad People

@pati_gallardo
35
@pati_gallardo
14
Introduce Rules for Communication,
like praise in public, criticize in private

@pati_gallardo
36
@pati_gallardo
15
Try to make it possible to choose
who does your code review

@pati_gallardo
37
@pati_gallardo
16
Learn. Learn. Learn.
Knowledge is Power

@pati_gallardo
38
@pati_gallardo
You’ll probably feel lonely at work

@pati_gallardo
39
@pati_gallardo
17
Try to make the team more diverse in any direction.
That changes the tone.
But get more women devs,
if not in the team then at least in adjacent teams.
It is hard being alone.

@pati_gallardo
40
@pati_gallardo
Your words can be used against
you, choose them carefully

@pati_gallardo
41
@pati_gallardo
18
Walk out at any Locker Room Talk.
It’s easier than discussing it.
And they’ll get the message.

@pati_gallardo
42
@pati_gallardo
You need to pick your battles

@pati_gallardo
43
@pati_gallardo
19
Get a Powerful Ally
and plot (literally plot)
to compensate for social power being unequal
when it really matters.
Like having them back you up
in important meetings.

@pati_gallardo
44
Ghostwriting
The Less Powerful gives
ideas to a more Powerful
to Get Things Done
Sometimes getting it done is more important than credit

@pati_gallardo
45
@pati_gallardo
20
Don’t waste time catering to people
that won’t give you the time of day.

@pati_gallardo
46
@pati_gallardo
21
Ask awkward public questions
about any inappropriate “decoration”

@pati_gallardo
47
@pati_gallardo22
Don’t become like them,
you won’t like yourself
anymore
Purl, Pixar

@pati_gallardo
48
@pati_gallardo
Purl, Pixar

@pati_gallardo
49
@pati_gallardo
Purl, Pixar

@pati_gallardo
50
@pati_gallardo
Purl, Pixar

@pati_gallardo
51
@pati_gallardo
Don’t let them pit you against
other women.
There can be more than one.

@pati_gallardo
52
@pati_gallardo
23
Stay far away from “non-technical” work
if you want to stay technical.
You’re already typecast as “so -skills”

@pati_gallardo
53
@pati_gallardo
You don’t owe them your time

@pati_gallardo
54
@pati_gallardo24
Finally, don’t let anyone convince you that this is
your responsibility.
These are Survival Tips.
You shouldn’t have to ﬁght to survive
doing your job
on the same playing ﬁeld as your colleagues.
These tips don’t make this Your Fault.
You are great just the way you are.

@pati_gallardo
55
The stages of acknowledging
systems of oppression
(or the ﬁve stages of grief)

@pati_gallardo
56
We all have things to unlearn
We are all colored by our environment
But now we’re grown
Now we get to decide who we are
And what we stand for

@pati_gallardo
Turtle
Sec
Questions?
Photos from pixabay.com
Patricia Aas, TurtleSec

Survival Tips for Women in Tech (JavaZone 2019)

Recommandé

Recommandé

Contenu connexe

Plus de Patricia Aas

Plus de Patricia Aas (20)

Dernier

Dernier (20)

Survival Tips for Women in Tech (JavaZone 2019)