Hello,

We noticed you're browsing in private or incognito mode.

To continue reading this article, please exit incognito mode or log in.

Not an Insider? Subscribe now for unlimited access to online articles.

Rachel Metz

A View from Rachel Metz

At TrustyCon, Hypponen Says What He Won't at RSA

RSA isn’t the only computer security conference in San Francisco this week.

  • February 28, 2014

On Thursday morning, Mikko Hypponen spoke to a crowd in a movie theater in downtown San Francisco, just around the corner from the RSA security conference. Hypponen, the chief research officer at Finnish security software company F-Secure, was originally scheduled to speak this week at RSA, as he’s done eight times since 2004. But he decided to boycott the conference after Reuters reported in December that the U.S. National Security Agency had a secret $10 million contract with RSA, the computer security company behind the conference, under which RSA added a faulty encryption algorithm created by the NSA to one of its computer security products in order to allow the agency to break such encryption when needed.

Hypponen wasn’t alone. Several others in the industry (security consultancy iSEC Partners, digital rights nonprofit the Electronic Frontier Foundation, hacker conference DEF CON) felt likewise, and quickly organized the daylong TrustyCon—billed as a “trustworthy technology conference”—to serve as an alternative to RSA in a theater at the nearby AMC Metreon. It had 400 attendee slots, which organizers said sold out.

Speaking early in the day’s schedule, Hypponen addressed the crowd with the same talk he planned to give at RSA, which would have been titled “Governments as Malware Authors” (it was listed on TrustyCon’s agenda as “The Talk I Was Going to Give at RSA”).

Hypponen spoke about how far-reaching, sophisticated, and threatening government surveillance has become, especially as we become increasingly connected and spend much of our time online feeding data to just a handful of big American Internet companies. He also focused in part on the word of the day, trust, by discussing how reliant customers are on security companies to help keep computers from being hacked.

Though Hypponen said he was “happy” to not be wearing an RSA Conference badge, he also seemed a bit saddened and frustrated as he addressed the crowd, both by RSA’s action and how the U.S. government’s appettite for surveillance is affecting the security industry and private citizens.

“I work for a security company. Security companies work on the basis of trust. If our users don’t trust us, there’s really nothing left,” he said.

If you’d like to watch Hypponen’s talk, it’s available here.

Become an MIT Technology Review Insider for in-depth analysis and unparalleled perspective.

Subscribe today
More from Connectivity

What it means to be constantly connected with each other and vast sources of information.

Want more award-winning journalism? Subscribe and become an Insider.
  • Insider Plus {! insider.prices.plus !}* Best Value

    {! insider.display.menuOptionsLabel !}

    Everything included in Insider Basic, plus the digital magazine, extensive archive, ad-free web experience, and discounts to partner offerings and MIT Technology Review events.

    See details+

    What's Included

    Unlimited 24/7 access to MIT Technology Review’s website

    The Download: our daily newsletter of what's important in technology and innovation

    Bimonthly print magazine (6 issues per year)

    Bimonthly digital/PDF edition

    Access to the magazine PDF archive—thousands of articles going back to 1899 at your fingertips

    Special interest publications

    Discount to MIT Technology Review events

    Special discounts to select partner offerings

    Ad-free web experience

  • Insider Basic {! insider.prices.basic !}*

    {! insider.display.menuOptionsLabel !}

    Six issues of our award winning print magazine, unlimited online access plus The Download with the top tech stories delivered daily to your inbox.

    See details+

    What's Included

    Unlimited 24/7 access to MIT Technology Review’s website

    The Download: our daily newsletter of what's important in technology and innovation

    Bimonthly print magazine (6 issues per year)

  • Insider Online Only {! insider.prices.online !}*

    {! insider.display.menuOptionsLabel !}

    Unlimited online access including articles and video, plus The Download with the top tech stories delivered daily to your inbox.

    See details+

    What's Included

    Unlimited 24/7 access to MIT Technology Review’s website

    The Download: our daily newsletter of what's important in technology and innovation

/3
You've read of three free articles this month. for unlimited online access. You've read of three free articles this month. for unlimited online access. This is your last free article this month. for unlimited online access. You've read all your free articles this month. for unlimited online access. You've read of three free articles this month. for more, or for unlimited online access. for two more free articles, or for unlimited online access.