Conferences

• DEF CON 22 (2014, Las Vegas) — "Open Source Fairy Dust" (video)
• DEF CON 23 (2015, Las Vegas) — "Backdooring Git" (video)
• ToorCon 17 (2015, San Diego) — "Backdooring Git" and "Cloud Insider Threats"
• DerbyCon (2015, Louisville) — "Backdooring Git"
• GrrCON (2015, Grand Rapids) — "Backdooring Git"
• Chaos Communication Camp (2015) — security research
• DEF CON SkyTalks (2015) — "ERP inSecurity"
• ROOTCON 9 (2015, Philippines) — "Backdooring Git" and "Open Source Internet Infrastructure Insecurity"; on the winning Hacker Jeopardy team
• ROOTCON 10 (2016, Philippines) — "Liberating Self Driving Cars"
• SigInt (2010) — "Echo Chambers and Systems in Hacker Culture"
• Notacon (about 2005, Cleveland) — security research
• ROOTCON (2002, Dearborn, MI area; not the Philippine ROOTCON) — "Satellite Foolery and Hijinks"
• ISC2 (recurring) — bug bounty to purple-team operations; listed as a Top Rated Speaker
• OWASP Bay Area Chapter (recurring) — "Cracking Financial Systems" and others
• BSides Cleveland (recurring) — multiple talks

Universities and companies

• Stanford University (2003) — "Complex Systems Engineering Limitations"
• JavaOne (2003, San Francisco) — "Java Security"
• Northwestern University (2005) — video game programming series
• University of Minnesota – Twin Cities (2005) — C and C++ programming for robotics
• eBay (2007) — "Security Imagineering"
• PayPal (2008) — "Complex Systems & Distributed Systems in Security"

The full list, with recordings where they exist, is at securesql.info/speaking.