A modest rebuttal

https://infosecwomen.tumblr.com/post/166022748733/increasing-safety-and-inclusiveness-at-hacker-cons/

There has been a lot of drama surrounding the events of Derbycon, and this is just the cherry on top.

I am posting this here for fear that, if I were to say this and have it attached to my identity, that I would be ostracized. Social Justice has been creeping into IT and Information Security slowly but surely, starting with "donglegate" and only getting worse from there. The problem I have with Social Justice is that.. If you don't agree, then you're "literally worse than Hitler" by default. There are no middle grounds. There is a list of demands to agree to, or there is nothing. If you disagree, Then your opponent labels you an undesirable, and broadcasts to his or her followers that you are a "racist misogynistic cisgendered shitlord". This generates all sorts of hateful comments, and much worse: doxing individuals to find out where you work, and contacting their management in an effort to leave them unemployed. Some of these people have families.

It is one thing to have words over the internet, it is another to knowingly destroy somebody's life over a disagreement. I cannot abide by that. You do not "win" by stooping down to that level, you win with civil discourse, facts, and engaging in a respectful manner. Why do you think certain communities on the internet are so despised? It is because they utilize those very same tactics against their perceived enemies. What do you think utilizing these tactics does to the message you are trying to send?

With regards to the code of conduct, or the supposed lack thereof..

Complaining that a code of conduct doesn't exist, then lashing out at everyone who (rightfully) state that it does, and its existence will not magically stop assholes from being assholes, and does not do you or any of your co-conspirators any favors.

https://www.derbycon.com/blog/derbycon-values-safety-and-code-of-conduct/

Additionally, the following text can be found in the Derbycon 7 program, provided to each attendee:

"DerbyCon is a conference where everyone and anyone is welcome. We are here as friends to share ideas, to learn, and to have an awesome time. Diversity makes us strong, and having a place where folks can be open and inclusive is our goal at DerbyCon. This means having equal respect and treating con attendees, staff, security, speakers, hotel staff, and anyone else attending DerbyCon with the same level of kindness and friendliness which align with our core values at DerbyCon. During your time at the conference, you can expect a safe, welcoming, and friendly environment. DerbyCon is a private event, and if there is unacceptable behavior, you may be asked to leave the con with no refund. If you are subjected to behavior that is unacceptable or unsafe, please report it to a staff or security member (designated in red). You can be assured that issues are taken seriously, and dealt with accordingly on a per case basis."

https://imgur.com/a/qXHqp

Just because there is not a neon red header for the code of conduct, does not mean that there is not a code of conduct. Just because the code of conduct fails to meet your criteria (e.g. specifically defining misconduct) doesn't mean that the staff and security team doesn't care (see:issues are dealt with on a case-by-case basis; this implies discretion and best judgement).

It is clearly explained that anyone can report problems to the security staff in the red shirts.

With regards to expelling so-called known abusers..

You're asking conference staff and security volunteers to expel people from the conference for things they didn't do at the conference. To me, this is sounds a lot like discrimination, blackmailing, and throwing a temper-tantrum. "I don't like them, so I want you to get rid of these people, or else I will say nasty things about your event."

Naming and shaming individuals that you want banned from an event you have never been to (and let's face it, probably won't attend regardless of what actions are taken) us a sure-fire way for you to garner resistance to your message. This does absolutely nothing to help your supposed cause of making conferences better and safer for everyone. You are just molding them to suit your agenda of kicking out the "undesirables".

If you cannot be an adult and coexist in the same venue as people whom you disagree with, then you need to grow up. Do not engage with those you disagree with. It can be that simple.

All but naming the "Derbycon Videographer" among those you would see banned from Derbycon (considering he handled streaming and video recording this year, once again making it available for free via youtube and archive.org), is particularly ironic, considering that he is a co-founder of the conference. Just because you have differences in opinion with someone doesn't mean that you get to decide that they get kicked out. Claiming that you consider the conference an unsafe place because of his presence there is childish. People are allowed to express their opinions. And the fact that he hasn't been kicked out of Derbycon yet (7 years strong now) show that the conference staff and attendees value the chance to interact with him, or in spite of conflicting views, are able to deal with it like adults, and either discuss their differences, or agree to disagree.

..If I might add, it has been a few years since that April fools joke. Is it not time to let it go?

With regards to the abuse case...

Complaining that one of the the two parties in a domestic dispute that have mutual restraining orders placed against one another was not permanently expelled from a conference, for an event that happened outside of the conference does nothing to help your cause. It is not the responsibility of the conference organizers or security staff to enforce your restraining orders. There was an altercation, both parties filed restraining orders, you know that one of the parties will be at the conference, act like the adult you are, and plan accordingly. Domestic abuse is unquestionably bad, but the conference staff and security team are not members of law enforcement, and have zero obligation to mediate for either party, or force anyone to leave for something that did not happen at the conference. Their job is simply to ensure the attendees are safe, and not causing the venue any issues. End of story.

Nobody cares about your hurt feelings. Nobody is obligated to care about you how you feel about certain individuals attending an event.  The conference security staff is not law enforcement and is not responsible for enforcing restraining orders. If you do not like that, or the environment surrounding a given event, then do not attend the event in question. The fact that the conference organizers have been willing to meet with you publicly and discuss your concerns shows remarkable maturity on their part. The safest space that can exist is the one you control, so if you do not feel safe going to an event, do not go. You are not being brave, and you are not doing anyone any favors by showing up, or even worse, complaining about a conference that you have never attended. The security staff of a conference exist to ensure that everyone is having a good time, and to step in if and only if attendees are being a danger to themselves (e.g. over-intoxication) or others (misconduct, harassment, fighting, threats, etc.). What is more is that they are volunteering to do this. Stop acting like a victim and forcing your problems on to everybody else, and start acting like an adult with the capability to solve problems and discuss your differences as opposed to airing your dirty laundry all over social media. Stop building walls, and start building bridges. Derbycon is a place where diverse opinions are being shared. Your alternative is denouncing this conference, discouraging attendance, and preventing this information from being shared. "Meet our demands, or perish." Is this the message you want to send?