Secure Code Is Critical Infrastructure: Hacking Policy for Public Good

A Canadian civic technologist and software security advocate argues that secure code and vulnerability disclosure frameworks must be treated as essential national critical infrastructure on the Creator Stage [00:11]. The speaker critiques sluggish government cybersecurity policies, pointing out systemic vulnerabilities such as public sector portals failing basic security baselines like mandatory HTTPS enforcement [05:19].

The presentation examines the operational shortcomings of government supply chain directives that mandate manual reviews of every software dependency, calling instead for automated, enforceable baseline security controls [10:04]. The speaker recounts systemic breaches across Canadian federal agencies—including incidents at the Canada Revenue Agency (CRA) [14:55]—and chronicles grassroots advocacy efforts in Ottawa to establish legally protected vulnerability disclosure programs (VDPs) and direct public funding for critical open-source software maintenance [19:32, 24:20].

(AI summary — Gemini Flash)