Post

Day 2 of BlueHat Asia opened with remarks from Jeff Moss, founder of DEF CON and Black Hat, who reflected on the lessons he's learned from building security communities and navigating decades of technological change.

Drawing on experiences spanning the hacker community, government advisory roles, and industry leadership, Jeff explored what remains constant even as technology evolves: people, curiosity, and the power of community.

Jeff described the hacking community as his first real community, a place where people learned from one another and built lasting relationships. That experience shaped one of the central themes of his talk: no one can know everything. Success depends on having trusted people you can ask for advice.

As AI becomes increasingly capable, Jeff argued that these human connections remain as important as ever. He also reflected on what distinguishes hacking from information security. Infosec can be about sharpening tools and refining techniques, but hacking is about learning how to think.

It requires experimentation, puzzle solving, and a willingness to ask "what if?" Failure is part of the process, and many of the best ideas emerge from people willing to experiment and learn.

Another key lesson was communication. People often fear what they don't understand, and Jeff pointed to AI as a modern example. Rather than responding to fear with more fear, he encouraged the audience to focus on education and clear communication.

He also noted that it's impossible to please everyone all the time. Whether building products, communities, or security programs, leaders must understand who they are trying to serve and use that audience as their north star.

Jeff offered a prediction shaped by decades of experience: all problems at scale eventually become moderation problems. From spam and DDoS attacks to social networks, AI systems, and autonomous agents, successful communities depend on rules, governance, & the ability to manage bad behavior.

Jeff described this as a golden age for both offense and defense. AI is creating opportunities to automate routine tasks, allowing researchers and defenders to spend more time on creative work and innovation. The goal isn't replacing human creativity, but creating more opportunities to apply it.